authentication

Servlet security authentication

How to make security authentication for a web application that is using servlets and .jsp. I want to make authentication using tomcat. Can anyone explain steps I need to take in servlet and jsp for FORM authentication. Servlet is taking care of .jsp page that needs to be secured. ...

jcifs.smb.NtlmPasswordAuthentication getPassword() null

i trying to do integrating with AD with jcifs. each time i do getPassword(), i get null. as I am using WMA. each time firefox will prompt for username/password . how to get the password entered by user? i able to get the username with .getName(); ...

Getting NetworkCredential for current user (C#)

I'm trying to invoke a webservice from a console application, and I need to provide the client with a System.Net.NetworkCredential object. Is it possible to create a NetworkCredential object for the user that started the application without prompting for username/password? ...

Custom client credentials type (username in querystring)

I've been digging through WCF security in an apparently vain attempt to create a service/endpoint behavior that allows me to specify the client username/password credentials (but not to authenticate them, I'm happy to use the built in functionality for that). My intent is to supply the username (no password) in the querystring for use wi...

True or False: cross-domain SSO always requires a third party identity provider

I currently have several websites which live on separate domains: www.app1.com www.app2.com www.app3.com Each has its own authentication mechanism - some query active directory via web service, others have their own user database. The goal is to have Single Sign On through some technology or product that doesn't require users to re-...

Download a file from the internet using java : How to authenticate?

Hi, Thanks to this thread http://stackoverflow.com/questions/921262/how-to-download-and-save-a-file-from-internet-using-java I know how to download a file, now my problem is that I need to authenticate on the sever from which I'm dowloading. It's an http interface to a subversion server. Which field do I need to look up into ? Using th...

How do I create a lock/unlock button and behavior in my secure preference pane?

Is there a guide out there for imitating the Lock/Unlock button and behavior of the secure Apple preference panes? (e.g. Network) ...

Auth Component not working as expected in cakephp

Hi, I am trying to build the login registration page for my website, I am facing problems with he Auth Component, function beforeFilter() { $this->Auth->loginAction = array('controller'=>'users','action'=>'login'); $this->Auth->loginRedirect = array('controller'=>'users','action'=>'landing'); $this->Auth->logoutRedirect = array('cont...

SVN checkin as different users on Windows

I would like to have an option to select what user that I'll do my checkin as when checking in from Windows. When using TortouiseSVN it seems like the authentication information is stored per repository and it cannot be changed. What would be a good way to make it easily possible to checkin as different users using SVN in windows? ...

CakePHP password field is empty

Hi, I am implementing an authentication component, This is my registration page create('User',array('action' => 'login')); echo $form->input('primary_email',array('size'=> 32)); echo $form->input('password',array('label' => 'Password')); echo $form->input('remember_me',array('label' => 'Remember Me','type'=>'checkbox','ch...

Authentication without a username and a password

Hi, I'm working on an AIR application that connects to facebook. After the user connects to his facebook account he should be able to do stuff to the account linked to the facebook account he's logged into. Typically, you'd have a login() function that accepts a username and a password, authenticates them and sets a cookie. In my case,...

Combining mod_access and mod_auth

I am working on a beta site that is currently password protected. I want to experiment with Yahoo BOSS as a search solution, but I can't find an equivalent of Google's Webmaster Tools that allows me to enter the username/password to login. I thought about modifying my Apache config to require password protection UNLESS the visit looks l...

(Ruby,Rails) Role-based authentication and user management...?

Hi All, I'm looking for a quality Administrative plugin for Rails. It seems that most of the existing plugins/gems (e.g. "restful_authentication", "acts_as_authenticated") revolve around self-signup, etc. However, I'm looking for a full-featured Administrative/Management role-based type of solution -- but not one that's simply tacked ...

Integrating CSLA Authorization with DotNetNuke Roles

I am interested if anyone has experience using DotNetNuke authorization in CSLA. I would like to be able to use my DotNetNuke roles to be able to assign permissions to my CSLA objects and properties. If I just reference the DNN assemblies won't that create an unwanted dependency in my CSLA business objects? Would it be easier to build...

Easiest way to authenticate users in Linux/Unix w/o root permissions

Hi All, I'm writing a cross-platform TCP/IP server and I need to authenticate users before servicing them. Requirements stipulate that I use "native" authentication of the platform and not create my own authentication mechanism. For Linux/Unix OS family I use getpwnam to authenticate users and the most reliable way I know to make sure ...

By default, does ASP.NET Login Control use the ReturnURL to redirect?

If I drop a System.Web.UI.WebControls.Login onto a page, should it redirect to the ReturnURL by default? Or do I have to set some config settings or write some code to make this work? ...

automatic keystroke to stay logged in

I have a web based email application that logs me out after 10 minutes of inactivity ("For security reasons"). I would like to write something that either a) imitates a keystroke b) pings an ip or c) some other option every 9 minutes so that I stay logged in. I am on my personal laptop in an office with a door, so I'm not too worried abo...

Consuming web service from BizTalk with authentication credentials

I am trying to consume a web service from BizTalk by supplying credentials in the SOAP adapter port. I type in the Web Service URL and then I have the choice of Anonymous, Basic, Digest and NTLM authentication types. How do I supply my username, password and domain?.. when testing with soapUI it works perfectly. The only way I get to ...

Is the Authorize attribute in ASP .NET MVC used for Authentication as well as Authorization?

I'm reading up on ASP .NET MVC, and I just got to a section talking about the Authorize attribute. It's saying that the Authorize attribute is used to check that a user is authenticated against a Controller. Is this true? I know that the attribute is designed to be used for authorization purposes, but is it also a best practice to use...

Is it possible to use the "impersonate" function with a string (username) rather than intptr?

The System.Security.Principal.WindowsIdentity.Impersonate function takes a System.intptr parameter, which seems awfully useless in my situation (with my limited understanding). I am developing an intranet application that uses integrated security to authorize users page-by-page against a role associated with their Windows Identity. I...