My ASP.NET MVC site requires forms-based authentication for some resources (downloads, discussion forum, etc). This works great with the [Authorize] attribute. However, I need my admin site (`~/Areas/Admin/*) to authenticate against active directory. With regular ASP.NET or classic ASP, I would just go into the IIS config and change th...
Everything I have tried requires the end user to sign in to yahoo...this won't work because the end user doesn't know the password or the username. This should be automated otherwise flickr wont work ...
We are going to deploy a Drupal site inside company's intranet. There is a requirement for user to reset password. We have a centralized password reset mechanism (for single sign on): user submits a password change request in system the request is sent to a password server the password server will reset the user's password in all syste...
I'm trying to think of a way to open a website and part of its database to other third party websites, similar to how Twitter lets webapps connect to its database to retrieve data and possibly store data. My initial research led me to oAuth (or is it openID?). What I need to do is let the third party websites login to a user's accoun...
How i can get Current User. And how i can validate user via Active Directory by user and pass. ...
I'm trying to understand the use cases for which implementing oAuth as a service provider is the way to go. It seems that implementing an oAuth service is a lot of work, so I don't want to go through the trouble just to discover I was barking up the wrong tree. Any examples of such use cases to help me wrap my head around when to use or ...
Hello, two years ago I had to design a system to share authentication data across multiple domains, all of them shared the same server/db. I was able to pull this off with a complex system of cookie sharing which, to date still works. I'm now in the process of redesigning the system and I was wondering if there are better ways to achie...
I need to connect to a web service that requires authentication credentials in the form of a plain text user name and password. I have a basic understanding of SOAP and have managed to connect to other open web services that do not require a username or password using NuSOAP. The following was sent to me: <?php // Set up security opti...
Hi guys, I am just starting out with JSP in NetBeans 6.9.1 and im trying to make a basic login script for user authentication (sessions will be added later; These are made automatically for every JSP page right?) The problem I am having is the following. I followed the tutorial at: http://www.roseindia.net/jsp/loginbean.shtml ** I mad...
I would like to store an authentication token in a session cookie. I'm using google app engine and restlets. I've done a few searches, but I have no idea even where to begin. I would like to: Store the token in a cookie Read the cookie when the client makes a request through restlet Also, is the session cookie the correct place to...
I have a web application that has a configuration folder that houses multiple XML files that are configuration settings for multiple "portals" as you will. I need IIS to have access to them so the "portal" loads (sql connection strings, master page paths) but I want to deny any outside access (url browsing). Here's an example below: h...
I'm relatively new to using IIS 7. I'm getting confused by the various options that IIS 7 provides. What does setting authentication mode="Windows" do in the web.config of my ASP.net site do? What does enabling Windows authentication in the Authentication module in IIS 7 do? What is the difference between these two? Does one override ...
Hi, I am trying to connect to service which is accesssible over https and need authentication. The error I get is: Test method TestProject1.UnitTest1.TestReharB2B threw exception: System.ServiceModel.Security.MessageSecurityException: The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The a...
I've got a Silverlight application that will be running out on the open internet, available to basically everyone who has ever lived. The application makes use of RIA Services to manipulate data in a database on the server. The application creates, reads, updates, and deletes data of different varieties, however I only want these oper...
I want to authenticate user in WCF and getting this errror: Test method TestProject1.UnitTest1.TestLocalB2Bssl threw exception: System.ServiceModel.Security.MessageSecurityException: The HTTP request is unauthorized with client authentication scheme 'Basic'. The authentication header received from the server was 'Basic...
There is the following design: the back-end implemented as WCF, the public front site and two intranet sites (all three talking to the back-end). I believe that authentication on the sites is not enough (i.e. passing ClientID to WCF in each request as a parameter) and i want to protect my back-end (WCF) with authentication to perform dou...
Since last week I've had a really odd issue with PageMethods and the back button which i've never seen before. Essentially, I have a 'home page' which on document.ready (using jQuery), loads some data through PageMethods, and then renders a list - from which you can click through to a details page about the item. In general use, it wor...
I have a simple ASP.NET site making a call to a WCF service. The call works in Visual Studio 2010 (both sites running under Cassini using basic HTTP binding). Moving the same thing to XP , running the web site page (which makes a simple call to the WCF service) makes the web server throw a "500" error. There is nothing in the Event Log....
I'm building a Rails 3 web application and i wanna choose between restful authentication and authlogic method. Among restful authentication and Authlogic, which one is better, based on the foolproof security , customisable and hackproof ? ...
Hi! So I'm developing an app in PyQT and I need to implement user authentification. Basically I have drawn 3 layouts (all same size window)...on login layout, one layout for user A and one layout for user B. The the thing I want to achieve is that when user A logins he gets his specialized layout and so does B. And I want it to if possib...