authentication

Stress Testing with NTLM Authentication

Hi, Looking for an open source web testing tool that can do Windows Authentication. I've used openSTA and Pylot in very small amounts but found neither to do windows. openSTA says you can do NTLM here: http://www.opensta.org/docs/sclref/build-auth-blob.htm I could not get it working - probably due to some config on the network or may...

EJB Authentication and Authorization

Is there any way to extend the authentication operation which connects a client application to an EJB, using standard JAAS/container-based security? I'm looking for a way to use more than just a username to authenticate the user (in this case a domain name is also needed). Ideally I'd like to be able to use the SessionContext.getCallerPr...

CakePHP session/auth logging out intermittently

I'm having reports and complaints from my user that they will be using a screen and get kicked back to the login screen immediately on their next request. It doesn't happen all the time but randomly. I am using CakePHP and the Auth component, which seem to work well other than this issue I got some feedback on the Cake forums once tha...

Single sign on with Joomla and Flash

I have a Joomla site and a Flash app (in Flex, if it matters). The Flash app is using BlazeDS as back-end. All the things are hosted in the same server, same domain. Are there anyway to implement SSO for the above environment? Update: What I want is: If the user logged in at Joomla, they will be auto logged in at the Flash app. Same v...

Git with ldap authorization

Is there a way to authorize user via ldap on a git repository? Or phrased slightly differently: Is there a way to deny people pull/push if they are not in a specific ldap group? Edit: Yes, great idea using PAM and/or a hook. Does anyone have experience using git in combination with pam_ldap? ...

How to utilize ASP.NET current user name in SqlParameter without code-behind

How do I get to the current users name without doing it in the code-behind, just using the aspx server tags? In code-behind I can just do this: Label4.Text = User.Identity.Name.ToString() But I'm trying to do it without code-behind like this: <body> <form id="form1" runat="server"> <div> 1. <asp:Label ID="Label1" run...

Cannot connect to MySQL 4.1+ using old authentication

I'm trying to connect to a mySQL database at http://bluesql.net, but when I try to connect, it gives this error: Connect Error (2000) mysqlnd cannot connect to MySQL 4.1+ using old authentication I've looked into this, and it has to do with some old password scheme used before MySQL 4.1. Newer versions have the option to use old passw...

Zend Framework rememberMe() doesnt seem to remember me

My session seems to only be valid in the current window/tab. Also it seems to timeout quickly. Heres how I'm currently attempting to do it: This is in my login controller: $adapter = $this->getAuthAdapter($data); $auth = Zend_Auth::getInstance(); $result = $auth->authenticate($adapter); if (!$result->isValid()) { $this->view->...

How can my server securely authenticate iPhone in-app purchase?

Look at Apple's diagram for the server purchase model. In step #9, how can the server know that it is really talking with an iPhone that is entitled to the purchase, and that Eve is not performing a replay with a dishonestly obtained receipt? The receipt may be valid, but that doesn't prove that the sender is the entitled party. Is th...

asp.net authentication - use credentials from web.config - problem

Hi, I have a simple problem which is giving me headaches for a couple of days. I've created very simple application with login control. I keep user data in web.config file: <authentication mode="Forms"> <forms name=".RzeskoLoginCookie"> <credentials passwordFormat="Clear"> <user name="test" password="test"/> ...

CURL Authentication being lost?

I am authenticating a login via CURL just fine. I have a variable I am using to display the returned HTML, and it is returning my user control panel as if I am logged in. After authenticating, I want to communicate variables with a form on another page within the site; but for some reason the HTML from that page is returning a non-authe...

Get Identity when calling WCF service from Silverlight app authenticated with Forms auth.

Hi I'm doing FormsAuthentivcation, on a Silverlight app. When the SL app calls a WCF service I'm trying to get the authenticated username from within my WCF service like this: ServiceSecurityContext.Current.PrimaryIdentity.Name; or this (unsure of which to use, problem is that both are empty) ServiceSecurityContext.Anonymous.Primar...

same password for multi-users in zend

I have the following scenario in zend framework: Data Table of students Table of classes, which contain many students each. Table of assignments, each of which is assigned to a class and given a password I want students to be able to access an assignment given that assignment's id and shared password, but for the application to note wh...

Changing from md5 to sha256

Hello I'm trying to build a safe user authentication system. The code is from http://net.tutsplus.com/tutorials/php/simple-techniques-to-lock-down-your-website/ But Im trying to change from md5 to sha-256, But It wont login. I just changed from $auth_pass = md5( $row['salt'] . $password . $stat_salt ); to $auth_pass = hash('sha25...

how to implement php login or authentication session

I'm new to php. I've been looking at php login tutorials but they all seem relatively insecure. I would prefer to use a php authentication api or framework. Does anyone know what I can use to implement robust login functionality into my site? ...

OpenID for Google App Engine

I saw many links over the internet and specifically openid-consumer project (which is a part of http://code.google.com/p/google-app-engine-samples/), but it doesn't work as honestly readme file says. So what's the latest update on that? Is there any way I can authenticate my web site users with OpenID from someone besides Google (like s...

PHP, Prevent users from accessing a page while not logged in?

How can I prevent a user from accessing a page when they are not logged in? I want him to be redirected to the login page. I know it has something to do with sessions. ...

Is authentication required/recommended with a stream cipher?

I want to secure the communication of a TCP-based program using a shared passphrase/key. The easiest way to do that without having to deal with block size, padding, ... is to directly use a stream cipher. Doing that way, the amount of data is not changed between clear and encrypted data and the modification is trivial. Using only a stre...

Shared authentication for web services

Our company, Company A, may soon be partnering with Company B under some sort of licensing agreement. If it goes through, it will be necessary for users of Company B's web service to have access to Company A's web service. In other words, any user with an account for Company B's service should automatically have an account with Company A...

How to show authentication dialog in C# .Net 3.5 SP1

I'd like to access network shared files. How do I show the system authentication dialog box so that user can enter username and password? ps: Through UNC, In WinForm. I'm writing a explore control, I'd like to show the dialog after the user double click on a network shared folder. ...