authentication

command line cURL works but php one doesnt

The code: // That works pretty well curl -d "user%5Blogin%5D=some%40email.pl&user%5Bpass%5D=testpass&user%5Bmemory%5D=on&user%5Bsubmit%5D=Login" -L -c cookie.txt http://turbobit.net/user/login //But this PHP code doesn't $headers = array('Content-Type' => 'application/x-www-form-urlencoded', 'Referer' => 'http://turbobit.net/'); ...

Use custom UserNamePasswordValidator or custom Membership Provider

Hi! I’m adding authentication for my WCF services, and I’m looking at the UserNamePasswordValidator and the Membership Provider, for me it seems like they do the same, but you get a lot more user function when using the Membership Provider. Since I only need the user/password authentication, my DB has all the user and role data, I was j...

Authenticate SVN users using local Linux Groups?

Does anyone know how I can configure svn to use local linux groups to authenticate users? For example if we have: devrepo = should be accessible by groups 'dev' and 'prod' productionrepo = should be accessible by only the 'prod' group Due to security limitations of the platform concerned, we cannot use Apache so only svnserve or plai...

Urllib2 authentication with API key

Hello Friends, I am trying to connect to radian6 api, which requires the auth_appkey, auth_user and auth_pass as md5 encryption. When I am trying to connect using telnet I can get the response xml successfully telnet sandboxapi.radian6.com 80 Trying 142.166.170.31... Connected to sandboxapi.radian6.com. Escape character is '^]'. GET...

Integrating openid authenticiation into a php application

Hello guys, I want to integrate openid authentication into my php application. It must support authentication from yahoo, google, aol, msn/hotmail/live (not sure if its support openid). I have tried searching google and have been able to come up with anything useful. I will really appreciate advises and links to good tutorials. Thank...

SharePoint crawling - Windows authentication failing for STS4?

In a Sharepoint 2010 installation, we are trying to crawl the content of a small, single-node SharePoint installation. The crawling is partially successful. We are able to retrieve data delivered from the web services (_vti_bin/sitedata.asmx), but when the crawler tries to access the full page contents, it fails. The error message shown ...

Django - auth user with the email domain and no password

I have a request to alter a standard Django login of email and password to allow any user login without a password, but only if they are on a certain domain ... e.g. [email protected] ... where the user is allowed in due to them being on the correct domain. Any suggestions? Thanks ...

Second layer of authentication in ASP.NET MVC2 application

We have an ASP.NET application that's partly in MVC (the rest of it being a legacy webforms-based CMS). The application is authenticated via Forms Authentication, although any user accessing it from a specific set of IP addresses are automatically assigned to a "special" user. We currently have a child application that we would ideally...

How to override Silvelright 4 RIA Service AuthenticationService User.IsInRole

I've started out with the Silverlight 4 Navigation Application template (RIA Services enabled). (As I really don't like the bloated Business Application Template) I've added an Authentication Service and I'm able to authenticate users, but want to override the User.IsInRole method. WebContext.Current.User.IsInRole("Guest"); But I cann...

How can I use a USB key to secure my application?

Is using a USB key to secure an application the best option? If it isn't, what is the best way to secure an application in the form of requiring a valid user before the application can be used? The reason I ask this question is that a client recently asked me to make an application require a specific USB device be inserted into the sys...

Can RubyCAS Use Windows Live ID as a Back-end Authentication Scheme?

All but one of our clients are using RubyCAS (or some version of CAS) to authenticate with our system, but one client uses Windows Live ID which requires that we maintain a separate authentication module for that one client. So, does anyone know if it is possible for RubyCAS (or another CAS system) to use Windows Live ID as the back-end...

Java servlet as proxy for Apache web server

I have an apache webserver that is used to serve php and static web files. In order to use active directory authentication i've written some code that can connect to AD through JNDI and authenticate usernames passwords and groups. What I would like is to map all requests to pages in apache through my servlet in order to make sure that a...

Encrypt plain text password for GAE <> Android communication

I have an application for Android which communicates with a Google App Engine (GAE) back-end. For authentication I have a user name and password, however I don't wanna store the plain text password on the client and transfer it in plain text on an insecure channel. So I was thinking of hashing the password when the users enters it the f...

SSPI loop with Windows client (C#) and Linux server (any language)

I have a client-server application that needs to be secured by adding server-side authentication. The client user will already be authenticated to LDAP (Active Directory) and will be running a C# GUI. The client connects to a server on a Linux box which uses Centrify for LDAP authentication. As I understand things, the two need to neg...

Warden vs Rack::Auth::Basic. Doing HTTP-Basic-Auth in Ruby-Framework.

Hi... I want to create a WebService in Ruby (Sinatra, Padrino, maybe Ramaze... don't know yet...), but I definitely want to secure it... It will be the backeend for an Iphone-App, so I think SSL-Secured HTTP-Basic-Auth will be fine. I've been looking around at several authentication Frameworks and came across warden... Seems to be pret...

Generating unique URL based on user IP for Amazon cloudfront content

I have contents in Amazon cloudfront. These contents are private but will be given access to users when they purchase to get access to the contents for limited period of time. I want the URLs given to the users be generated for that specific user IP or may be current session key. I am aware of the option of generating an authenticated ...

CakePHP: authentication frontend and backend, are they possible together?

I'm developing a CakePHP 1.3 application which needs to login users backend and frontend. On the backend, admins and others must login to edit pages and data. On the frontend, users can login to see "private" pages. I'm using CakePHP ACL/Auth to login backend users (but i dont'have so clear how it works). What do you suggest? I was t...

Restful web service authentication

I have a Restful web service API, that is being used by different 3rd parties. Part of that API is restricted (you need username/password to access it). I was wondering what would be the best way of implementing authentication? I'm using https, so communication is encrypted. I have two ideas: Before user starts using (restricted) serv...

Authentication via WCF webhttpbinding on iPhone

I'm using ASIHttpRequest API to communicate with my WCF services. The WCF services are set up as webHttpBinding so I can communicate in basic JSON without SOAP. This is the code I'm using to talk with the service and pass along user credentials: NSURL *url = [NSURL URLWithString:@"http://allseeing-i.com/top_secret/"]; ASIHTTPRequest *...

How to retrieve Profile data usign OpenID authentication? ( Zend Framework )

I read some tutorials and came up with the following script to authenticate with OpenID. But I don't know how to retrieve profile data of the user logged in, like fullname, or email. can anyone help me with that? $status=''; $auth=Zend_Auth::getInstance(); $post=array(); $get=$this->getRequest()->getParams(); if($this->getRequest()->is...