authentication

How do I force windows authentication with local asp.net development server?

I'm developing an ASP.NET application which needs Windows Authentication. I have the web.config set up to deny anonymous users and use Windows mode for authentication, but my local development version still lets me pass right through to the site. In order to test different user set-ups, I need to force authorization so I can change use...

How safe is it to send a plain text password using AJAX?

Maybe the title is badly phrased but couldn't think of a better way of saying it. I am working on a login system at the moment (nothing formal, just experimenting) and was planning on using PHPLiveX (an AJAX library) for some features. Basically you create some PHP functions which are then called via JavaScript. You can add parameters (...

JCIFS Window Authentication in Java

Currently I was using jcifs to manage the window authentication. I've got few questions: The first time the user run the page and types in wrong password, when user try to key in again the password remain there. Even if I close the browser run again the password still remain there. How to remove the password? Can I implement like after...

Google login from flash Actionscript 2.0 in GAE

I want to implement Google authentication in Flash (actionscript 2) in Google appengine. After pressing the login button it will redirect to the Google login page and will come back to the site after successful authentication. Also, it can logout in same way. I am not good with actionscript and used "loadvers()" for action handling "on...

Authentication server for Google Apps

We are using Google Apps services in our startup for email and docs. However for some other purposes such as svn and bug tracker we have our local machines on which we have installed the required apps. All of them have their own separate credentail sets. Ideally I'd like to have one authnetication (i.e. that of Google Apps) and authent...

WCF Authorization - access to operations via claims

I am trying to implement authorization for a WCF service but I have run into some significant difficulties. I think I need to use a hybrid solution combining custom authentication and claims, but I am not sure if this is correct. My application uses Windows authentication to connect to the application. Once the user has been authorize...

[resolved] ServletAuthentication weak() method in Weblogic 9.2.3 always return false value

I am working on migrating Weblogic custom Authentication provider from version 8.1.5 to 9.2.3 In login servelet I have the following code ServletAuthentication sa = new ServletAuthentication(LOGIN_USERNAME_LABEL, LOGIN_PASSWORD_LABEL); int authenticated = sa.weak(request, response); Above code always return ServletAuthentication.FA...

php user authentication libraries / frameworks ... what are the options?

I am using PHP and the codeigniter framework for a project I am working on, and require a user login/authentication system. For now I'd rather not use SSL (might be overkill and the fact that I am using shared hosting discourages this). I have considered using openID but decided that since my target audience is generally not technical,...

ldap_bind_s returning LDAP_SUCCESS with wrong credentials

Hi guys, I have this little problem. I want to authenticate user against LDAP (Windows Active Directory), everything works OK, but the combination (good user, good password, wrong domain). LDAP* ldap = ldap_init(L"myserver", 389); ULONG ldap_version = 3; ULONG ret = LDAP_SUCCESS; ret = ldap_set_option(ldap, LDAP_OPT_PROTOCOL_VERSION, ...

Authentication between domains

I have: a service running under user account domainA\userA on hostA from domainA SPNs created for the service running on hostA for user account domainA\userA a client part of my application is trying to access resources (through remoting) from the service running on hostA but this client part is running on hostB from domainB and under ...

Gathering e-signature on Perforce submit

I've been working on a project to create an FDA part11-compliant e-signed document repository. The mandate is that it use Perforce to track the various revisions of the documents, utilize LDAP (AD) as the authentication/access directory, and re-authenticate the user at the point they submit a changelist. The first two requirements are i...

SQL 2k8 reporting services authentication through DMZ

I have SQL 2k8 server and reporting services installed on a server inside a domain. I also have a webserver that is outside the domain. I'm trying to run a reporting services report from the webserver (either through a URL or the report viewer component). I have managed to authenticate (as detailed in this post ), and now the report ki...

What is the best way to implement user login in Rails?

I am starting a new Rails project and I need to implement a login system that is secure because the application will be dealing with health data. What is the best way to lock down the app in rails? ...

Glassfish Custom Authentication Module?

I know glassfish can authenticate against an LDAP server, I also know it can authenticate against my own database. What I would like to do is authenticate users against LDAP, but get their roles from my own database. Where would I start learning how to create my own custom authentication module? ...

DB_SEC_E_AUTH_FAILED error

I'm getting this error when accesssing a WCF service that accesses a .mdb file on disk. It's apparently not a permissions error. Do any of you have familiarity with this error and what might be the cause? ...

Centralized Authentication and Authorization for several Web Services

There are several different web services -- various technologies used, such as Java, .NET, Python, Perl, and possibly more in the future -- belonging to different organizations, and the access to those web services has to be restricted. The idea is to have a central authentication and authorization server, only responsible for granting ...

ASP.NET, OpenID and registration confusion

Hi, I have managed to get all the authentication parts working, however i am confused about setting up registration. By registration i mean that if the OpenID is not attached to an existing account, then a new account must be created. Should i simply have it return to a registration page (with from fields for registration) and redirec...

JOSSO custom authentication scheme.

Hi, I want to write custom authenticaton scheme for JOSSO, but I can't understand how to tell JOSSO to use my own authentication scheme. Can you explain it? ...

How to logout when using .htaccess (and .htpasswd) authentication?

Possible Duplicate: HTTP authentication logout via PHP Hi I have a some functionality on my website protected using .htaccess and .htpasswd. When users attempt to access this, they get prompt to enter details. They enter their details and get in and can see stuff etc. All works fine. My question is how do I create a logout f...

How can we implement Basic Authentication and WSE 3.0

Hello, How can we implement Basic Authentication and WSE 3.0 in VS 2008. The purpose is to use this in DotNetPanel. Regards Fenie Thomas ...