authentication

Django/GAE anonymous users data

Hi, in my application I have per-user models, let me explain with a simple example: class Item(db.Model): master = db.ReferenceProperty(User,collection_name="items") name = db.StringProperty() description = db.StringProperty() value = db.StringProperty() def __unicode__(self): return u"%s"%self.name So I can store informations on...

Custom authentication handlers in phpBB3 issue: logging in but not saving to session

Hello, I'm creating a custom authentication handler in phpBB3 so that it's integrating into an existing website, and so members don't have to log into and create accounts on both the main site and the forum area. I've taking the existing DB authentication file auth_db.php, copied it, renamed it auth_whb.php, and set that as my authenti...

Why Firefox keeps negotiating kerberos service tickets ?

Hi, I ran some tests on Kerberos and found out some strange behavior related to Firefox and Kerberos. I have a server running Apache + mod_auh_kerb which is configured to check kerberos credential when serving requests from clients. Kerberos authentication is performed and user without valid credentials are rejected. However, I do not u...

Flickr Automation For Actions Not in Available in Flickr API (Like Adding Contacts)

EDIT: I added a bounty, if someone could help me figure out what I am doing wrong, its all yours. Also, I don't really care how this gets done. If there is a library that can help out, or something of that sort that would be great. Since there is no Captcha involved, I should theoretically be able to log into Flickr and add a contac...

How to authenticate an RSS feed

Basecamp uses HTTP authentication for its RSS feeds but this means that Google Reader, Bloglines and Firefox/Safari RSS don't work. Is it possible to secure an RSS feed but still allow access from these popular readers? ...

Has OAuth failed?

I consider to use OAuth for Single Sign-On (SSO) with RESTful services. At first sight to use OAuth as the de-facto standard looked naturally to me. But I must confess that I don't understand how to use it for SSO. During studying OAuth I discovered more and more criticism of Auth - so much that I tend to think OAuth has failed. OAuth i...

http module and http handler

Hi all expert, Somebody pls clear my concept What is HTTP module and HTTP Handler and how does they work while page requesting??? How authentication and Authorization process work in asp.net??? Thanks, Kumar ...

IIS7 Home Premium requires Windows Authentication

Browsing many websites, I came to a know that IIS7 does not support "Windows Authentication" if computer is running on Windows 7 Home Premium version. When tried to creating "Virtual Directory" for an web application from "Solution->Properties->Web" it is giving an alert that "Windows Authentication" component should be installed. If H...

How to set Request.IsAuthenticated to true when not using FormsAuthentication.RedirectFromLoginPage?

I am using Form Authentication and sending an Aajx request to the server for authentication. Based on the json result, the client decides where to go and what to do. That is the reason I am not using FormsAuthentication.RedirectFromLoginPage to not interfere the ajax/json response. In this case Request.IsAuthenticated returns false, eve...

string message authentication

Hi Guys, I get string messages from the clients which needs to be authenticated in the server. I need to ensure that I (the server) got the exact string content which was sent by the client. I don't care about the client identity. Just the message. I thought of using hashcode or CRC algorithm. Do you have any suggestions/best practices...

HTTP Digest Authentication

I want to use HTTP Digest Authentication with a central database that stores usernames and encrypted passwords. These data should be used by different servers like Apache httpd or Tomcat for example. The clients will be humans with browsers and other applications communicating in a RESTful way. As far as I understand I could not use a t...

SQLNET.AUTHENTICATION_SERVICES= (NTS) and ASP.NET

I'm trying to access an oracle database using using System.Data.OracleClient; from a console application, accessing the database is fine. however from an ASP.NET web site i get the error: ORA-12640: Authentication adapter initialization failed I've googled around and found that changing sqlnet.ora file would solve the issue //bef...

SOAP Authentication is not being sent

We are in the process of moving some software from our test environment into a production test environment. We've ran into a problem where our service can't communicate with another 3rd party service. After a bit of packet sniffing I was able to figure out that when the message is being sent on the working system the POST has an Author...

Django auth without "auth_*" tables

We would like to use our own tables for user management instead of the Django "auth" tables. We already have database tables that include all of the relevant information our application needs but it isn't in the Django format. We would prefer not to have the information duplicated in two tables. We would like to utilize the auth package...

Role of Session in user authentication/login?

I was hoping someone could help me with a question I've come up on. I have a Session object that handles storage of general session data, I also have a Authentication object which validates a users credentials. Initially I passed the desired Authentication class name to my Session object then had a login method that created an instance...

Is there a Python library for connecting to a PostgreSQL 8.4 server using certificate authentication?

We are in the process of upgrading from PostgreSQL 8.3 to PostgreSQL 8.4, in a large part so that we can start using certificate-based authentication. We have some Python 2.x code that accesses the database that uses PyGreSQL. Is there a way to get it or any other Python library to use a cert to access PostgreSQL? Looking through the P...

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed between the two. I noticed that the sequence seems to be the same every time I connect. That is, if the message sequence on the first negot...

How do I handle user logins with Spring MVC?

I'm using Spring MVC for a web app. I want to use OpenID for my application, but I'm just wondering of what a good way to handle authentication in general for Spring MVC is. My web app is a question and answer app. Here is the scenario I am confused about: When a user wants to ask a question, they enter a question in a text box and hi...

sharepoint authentication

Hello all, I have developed one site in sharepoint wss3.0 when i type in the url i.e. http://testserver/default.aspx i am first asked username and password On successful login(I have created user from sharepoint central admin site) i am redirected to my site's login page. then i have do login to access my site. Now what i want to do i...

Sharepoint wss 3.0 authentication

Hello all, I have developed one site in sharepoint wss3.0 when i type in the url i.e. http://testserver/default.aspx i am first asked username and password On successful login(I have created user from sharepoint central admin site) i am redirected to my site's login page. then i have do login to access my site. Now what i want to do i...