authentication

Access User object when generating a feed in Django

I'm working on a website that keeps track of upcoming homework assignments. I'd like to provide an RSS/Atom Feed that shows their upcoming assignments. However, I have no idea how I'm going to limit the items in the feed to their own, as not many feed readers support cookie-based sessions. Basically, I need to access the request object...

Problems with impersonation when connecting via VPN?

We have a Sharepoint layouts page that calls a Webservice (.asmx) to get some data. We use Kerberos/Integrated Windows Auth with impersonation and for users on machines in the domain this works just fine. However for users on a VPN (ie. their machine is not in the domain) this fails. We're getting 401s on the Webservice connection... Is ...

How to implement java Authentication in desktop application

Hello all what is the best way to implement AA mechanism ( authorization and Authentication ) in java desktop app , i have accounting application that needs AA mechanism ...

Authenticating a Java Web Start Client App

I have a Java Web Start Application which communicates against my server via a web service (over https). I want to restrict the usage of the webservice to my app only, so that 3rd party apps don't work. What strategies to I have? This question is somewhat broad, but running in JWS disables some options, like doing a checksum over all ja...

How to get NegotiateStream to use Kerberos?

After asking this question, I've been trying to use NegotiateStream to authenticate a Windows client against a Java server. It seems that Java doesn't have great NTLM library support, so I've been working on the assumption that I'd have to use Kerberos, which Java seems to support much better (via the GSS-API). The problem is that Nego...

User management, authentication and acl plugin for CakePHP?

Hi, I am pretty new to CakePHP, having been using rails for a little while. My question is, can anyone recommend a good user management, authentication and acl plugin or component for Cake? I have come across this one, but it has not been updated since 2008. If not can anyone recommend a good book/tutorial site for this kind of set up?...

Password protecting AutoIndex but not static files with .htaccess

I have publicly accessible files on my webserver. I'd like to enable AutoIndexing (Options +Indexes) but I'd like to require a password in order to view these listings. I have no problem setting up the Auth but there are complications with the public files and the DirectoryIndex files in that if someone also asks for a directory, and t...

Cross Site Authentication and Zend Framework

I have been asked to implement a cross site login solution in Zend Framework. I have thought about perhaps using OpenID, are there any other solutions to make a login persist across many sites? In some ways a closed system hosted by us would suit better. ...

ASP.NET MVC and ASP.NET membership provider - Handle authentication globally

Hi, I'm building a small app with ASP.NET MVC and I'm using the ASP.NET membership provider for handling users. Hooked this up to the login page of the basic MVC template. What is the best practice for checking a valid authentication globaly? I basically want to redirect to the front page or the login page if the user's not authenticat...

Joomla unified logins for forum and a custom made php sub-site

I'm building a site with Joomla where a forum should exist amongst other things. But also I plan to develop a custom made functionality (diary-like) with a php inserts (it really works, for example with jumi). The problem is that I suppose nobody will understand if the forum and this sub-site will have separated logins. I'd use an existi...

Is spam mail killing website authentication ?

I have so much difficulty sending authentication mail to new user that I'm considering relying only on third party logging system like stackoverflow does. The problem is that contrary to this site, my website is targeted to a not so tech-savy audience. So two questions arise: What are the solution to get a rock solid email delivery so...

SSRS 2008: ReportViewer does not have access rights to local Report Server

Hi, I'm trying to set up SSRS 2008 on my desktop machine for development purposes. The following is working fine: Report deployment on local server Previewing the report in BIDS Access to htpp://localhost/Reports panel But when I point the ASP.NET Reportviewer to the Report URL, I get the following error: The permissions granted...

Windows Authentication not passing Username

I'm trying to get the current logged on web user to use in an Online forms application. I'm running Server 2008 x86 with IIS7. There is a special field with in the application called User - Domain User that is supposed to return the username. I've enabled window authentication on the default website and on the application itself (Perfect...

storing user info/pass in web.config authentication

Hello, I am trying to write a simple internal app with some simple authentication. I'm also trying to make this quick and learn about the forms authentication via web.config. So i have my authentication working if I hard code my 'user name' and 'password' into C# code and do a simple conditional. However, I'm having a tough time stori...

SSO from external web app to multiple LDAP (AD) providers

Hi, We are looking into a solution for this problem: We host a ASP.NET web app externally on a dedicated web server which is on its own domain. We have a client who use the web app exclusively, and want SSO using their windows credentials to automatically authenticate into the web application without having to log on. This client has u...

ASP .Net Set Logged in user

I have an .net web application where I am authenticating a user through another means as well as using a login form. when the user logs in through the "other means" I want to be able to find the user in the membership DB using the MembershipProfider.Finduser() and if they exist (ie they passed the external auth means and also exist int ...

Get Windows Authentication Token Using Javascript to have Integrated Security (NOT using IIS)

I want to authenticate users on a web application. The users are already logged into their Windows Network. Notice, this is NOT Internet Information Server. I have a Java Application Server on the other side. Is there a way using Javascript or something, so that a Windows Authentication can be taken, then sent to the server, and on the s...

Can I deny ASP.NET anonymous access to all files?

My hypothetical website doesn't allow anonymous access and uses Forms Authentication. So the initial request for www.example.com/SomePage.aspx is redirected to www.example.com/Login.aspx?ReturnUrl=SomePage.aspx. However users can still access URLs that aren't served by ASP.NET, e.g.: www.example.com/Images/AnImage.jpg or www.example.co...

authlogic and ajax in place editing with rails, also routing issues

I'm trying to use Authlogic to protect some in place editor fields I have on a page. I've protected all the methods in my controller, but it looks like in_place_editor is calling some weird generated stuff that doesn't even show up in my routes, like "/quotes/set_quote_text/1". Number one is there a site that tells more about these "secr...

Simple Facebook Connect in Google App Engine (Python)

Does anyone have a simple and successful demo implementation of facebook connect in an google app engine application. I am developing an web application and want facebook connect to be the primary method for logging in. ...