authentication

Java XmlRPC Authentication

Hi Any clue or example on how to implement basic authentication for XMLRPC using org.apache.xmlrpc.webserver.WebServer? I'm using the Java API apache-xmlrpc-3.1.2 and I'm not being able to implement authentication without org.apache.xmlrpc.webserver.ServletWebServer ...

Silverlight RIA Services - how to do Windows Authentication?

I am building my first Silverlight 3 + RI Services application and need some help. It will be deployed in an controlled corporate intranet, 100% windows clients. I have started from the Silverlight Business Application template. These are my requirements: Upon launch the application needs to recognize the currently logged-in user. The ...

How do I handle user roles effectively?

That's kinda vague so here's the meaty stuff: I have seen authentication systems that do one of the following have a separate role table for each roles, and a separate permissions table, all users in one table have a separate table for administrators there's a lot that I have missed, I know. But what I'm trying to really ask is: Ho...

REST user authentication

OK... the basic idea is to have SERVER and CLIENT physically separated (two systems). My idea is to build a stand-alone web service (REST, XML, API-KEY) that will provide Authentication: User login, logout Data: Get list of products Then I will create clients in different languages (Flash, PHP, JavaScript). Data will be served only ...

ASP.NET Login control, login with e-mail but e-mail is not the username (how to)?

Using ASP.NET forms authentication, how would you accept an e-mail address and password, use the e-mail address to lookup the username, then log them in with the looked up username and password? We have this card system which has employee numbers, but no one can remember their numbers. The obvious would be use the e-mail addresses for ...

Ruby on Rails User Management Engine/Framework? (with web pages)

Hi, There are quite a few post/recommendations re Rails authorization plugins. What I'm asking here however is whether there is a popular/good Ruby on Rails Engine (or framework) that includes the user interface pages as well (and controllers/models etc). So something one could integrate in (Engine) or use as a starting point that inc...

iPhone: HTTPS client cert authentication

I'm fighting with a client certificate authentication. When a server needs a credential (a certificate in this case), this method is invoked from NSURLConnection delegate: (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge I want to load a certificate from a file...

Does partial known plaintext weaken a hash?

This is a question about an authentication scheme. Say I have a shared secret string S, and two computers, C1 and C2 Computer one (C1) sends a random string (R) to computer two (C2) C2 hashes (say SHA256) the concatenation of S and R (SR) C2 sends the hash of SR to C1, along with some instructions C1 compares the received hash of SR w...

Javascript client side login, how to authenticate server side?

I'm looking for the best practice to pass secure data from client side to server side. For example, I have a client side authentication and sometimes I need to call private apis on the server side from the client side, but I need to make sure that user is authenticated/authorized to perform those calls on the server side, and right now...

Site when published doesn't allow login

Ok, I've published a site using forms authentication. It works on my staging server. it does not work on the production server. The only thing different is sql is on a different machine for production. The site does work, showing data from sql, but when I use the login link on the site, it brings up the login form, I login, it redirect...

How does a web page remember you on next log in?

I am trying to implement the functionality that is done by most web applications on the web that have a login screen and a "Remember me" checkbox on the side that if checked will allow open entry to the user next time they visit the web page...As in, it does not ask the user for username and password anymore it just logs them in. I want...

Agile Web Development with Rails Chap8:Sessions

I have completed chapter 7 successfully so far but now am stucked at Chapter 8: Sessions I m using rails version 2.3.2 I am following the instructions and code as written in the book but It is showing me the error of Token Authentiction Failed when i refresh store.rb to see the cart. how can i resolve this problem? i want to know from...

authentication to sql 2005 using domain account from ASP

I cannot seem to use a Windows account to access my database from my ASP page. Here is my connection string: PROVIDER=SQLOLEDB;DATA SOURCE=NHA-SQL-I0;UID=DOMAIN\NHA-svcRequestForm;PWD=password;DATABASE=RequestForms I get the classic: Microsoft OLE DB Provider for SQL Server (0x80040E4D) Login failed for user 'NIRHB\NHA-svcRequestForm'. ...

firefox in ubuntu : how to automate basic authentication password confirm dialog

Hi, I have an ubuntu workstation with firefox always open on a (autorefreshing) web page protected by basic auth. At startup, I have autologin and automatic firefox start on the page and I have saved the basic auth credentials. I'd like to confirm in some automated way the username/password dialog box which pops up on the first openin...

How to set different web authentication mode for different database in Lotus Domino

Disclaimer: I'm not a Notes admin, I just wrote the application :), and I try to help our client to use it. We provide a simple database with one agent to accept and process HTTP POST messages from Internet. The Domino server where this database is going to be installed is configured for Single SignOn authentication for web access. Is...

Active Directory authentication in ASP.Net -- connection string help needed

I am new to Active Directory and asp.net authentication and following this article http://msdn.microsoft.com/en-us/library/ms998360.aspx to get it done. In one place in the article, it says to define the Active Directory connection string, and the example given is: <connectionStrings> <add name="ADConnectionString" connec...

ASP.NET cannot access non-aspx files without logging in (.js, .html etc)

I started a new solution with a website project and a logic project for all my class files. I copied the web.config file I use for all my other projects and just changed the database name in the connection string. When I run this project to be debugged, it won't let me access any files until I login. This includes javascript files, html...

making HTTP authentication optional with mod-python

Hi all, I've a web application that accesses multiple controller classes based on the parameters it is passed. For some of the controllers, I want users to authenticate themselves (by simple HTTP authentication), and for some I want public access. Is there a way to make this happen? In my .htaccess file, I now have AddHandler mod_pyth...

Log in loop ASP.NET MVC view with Authorize attribute

Hello SO: I just uploaded an MVC application to my live server. Before doing so, I created a user ('anders') after creating the necessary tables and stored procedures for authentication via the aspnet_regsql command in the VS2008 Command Prompt. I successfully tested, locally, that I need to log in before (or while) accessing this view:...

How to setup Forms Authentication with WindowsIdentity and SQL Server Integrated Security

Here is our current setup. We have Active Directory configured (domain named mis1) that handles all of our authentication issues. We have our web applications setup for impersonation=true so that we can have our database queries called as the user logged in. For this particular application, IIS is set to Anonymous access to we can have F...