authentication

Authenticating Windows users in Java server

I'm working on a server written in Java, and a client (a desktop application written in .Net) that runs on Windows machines on the same network. I would like to have some basic authentication so that the server can determine the username of the user running the client, without needing the user to re-enter their Windows password in the c...

ASP.NET: Deploying project with form autherication to webhost

Hey How do i upload the form autherication data in App_Data folder to my webhost? I have uploaded my project and everything works fine, beside the login. I get this error: A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the ...

Pure OpenID Authentication

Possible Duplicate: OpenID support for Ruby on Rails application What's the best way to implement a pure OpenID authentication in Ruby On Rails? ...

C# Silverlight with RIA Services Authentication

Hello! Does anyone have any good samples, resources, pointers etc. for C# Silverlight with RIA Services basic authentication or Roles?! All of the tutorials I've checked out aren't too great.... help appreciated greatly. cheers ...

Why not use Cookies for Authentication instead of sessions?

I would like to persist the user authentication between user sessions (basically a "remind me" by default). Sessions expire while cookies persist: why should I use a session for authentication and then another different cookie for the "remind me"? Can't I simply store a cookie whith a token and use it for both authentication and persis...

Authenticating (or even identifying) client machine in ASP.NET

What strategies work well for identifying the machine a user is browsing from? Assumptions: Domain User on a Domain Machine using IE and Integrated Windows Authentication with at least NTLM. This SHOULD be easy, but I can't find how you can pull this info out of Request or any other hole. Per-client certificates seems a lot of overhea...

Protect a directory in lighttpd using a php script

I would like to protect a directory and authenticate users against a mysql database. I am using lighttpd and haven't been able to find a way of doing so. Is it possible? ...

Python urllib2 HTTPS and proxy NTLM authentication

Hello, urllib2 doesn't seem to support HTTPS with proxy authentication in general, even less with NTLM authentication. Anyone knows if there is a patch somewhere for HTTPS on proxy with NTLM authentication. Regards, Laurent ...

Password protecting a rails staging environment

I'm trying to work out what the best way to secure my staging environment would be. Currently I'm running both staging and production on the same server. The two options I can think of would be to: Use rails digest authentication I could put something like this in the application_controller.rb # Password protection for staging envir...

When working with most APIs, why do they require two types of authentication, namely a key and a secret?

I have been working with APIs and I've always wondered why you have to use a key and a secret? Why do you need two types of authentication? ...

OpenID: Single User Interface Supporting Both Email/Password and OpenID

I like the idea of OpenID, I really do. But few of my target users have even heard of it - yet. If I want to offer OpenID as an option, my only choice would seem to come down to offering BOTH email/password authentication AND OpenID. I've seen several sites that use this combination and the idea seems unappealing to put it mildly. Placi...

Using PHP, how do you store credentials in a cookie with basic authentication?

This seems simple, but I am stuck. I am trying to use basic authentication using an API. I can use curl from the command line, but I can't figure out how to convert this to PHP and cookies. Please help! ...

Is it safe to share md5(cookie, some_string) with a third party service?

Hi, I need my users to authenticate against a third party service with the same cookie the use with my website. Is it safe to share the md5(cookie, service_name) with the service, where service_name is a constant string that all the users will use. To authenticate against the service a js function will do the md5 of the cookie on the ...

Authentication and Session Management

Hi, I am using ASP.NET 3.5 with Visual Studio 2008. I am a new bee in ASP.NET and working on a website where it can have 3 types of member visiting to it like admin, registered users and annonymous users. I want to provide authentication and session management for these users. I am not using Login Control provided MS/.NET rather create...

an auth method over HTTP(s) and/or REST with libraries for Python and/or C++

Because I don't exactly know how any auth method works I want to write my own. So, what I want to do is the following. A client sends over HTTPs username+password(or SHA1(username+password)) the server gets the username+password and generates a big random number and stores it in a table called TOKENS(in some database) along with his IP...

Running a classic ASP page as under IIS account when Windows auth is enabled

I've got windows authentication enabled on an ASP page so that I can grab the current user's username. This forces the ASP page to run as that user. I want to lock some files down that are currently being accessed by that page. Is there a way to have Windows Authentication enabled and still run the page under the account that IIS is runn...

ASP.NET MVC 1.0 Authentication...

Hi, I realise that I can prevent unauthenticated users from accessing views at controller level by applying the [Authorize] attribute and can also filter views down to individual users or roles using this. However, my question is regarding doing the opposite... Is there a way to deny authenticated users from certain views without having...

git-svn anonymous checkout fails with -s

I'm trying to use git to clone an svn repository with std layout (using the -s option). The repository uses https anonymously (the repository is at https://secure.simplistix.com/svn/xlwt/). I can check the repository out fine using svn, but with git-svn I get password prompts and then cannot check out (I don't have an account for this re...

Spring pre-authentication cannot update user principal

I have a problem where I can't seem to get my Spring MVC application to recognize a change in the user principal. The application I am using implements a preAuthentication mechanism for authentication. The problem occurs when a user logs into my authentication system, logs out, and then a new user logs back in. The custom authentication ...

Separate Admin/User authentication system in Django

I've recently started learning/using django; I'm trying to figure out a way to have two separate authentications systems for administrators and users. Rather than create a whole new auth system, I'd like to leverage django's built-in functionality (i.e. session management, @login_required decorator, etc.). Specifically, I want to have ...