authentication

SSL and authentication across multiple domains

I am building an app with Ruby on Rails which allows users to sign up and create their own subdomain: joebloggs.myapp.com So at the very least I need a wildcard SSL certificate to handle when users are passing sensitive data (authentication, payment etc). In addition, we are allowing users who want to, to map their own domain to thei...

restful authentication and LDAP

Hi, I'm new on ruby, i use the restful authentication plugin and that works perfectly, Now, i have an authentication based on LDAP, and i want to combine ldap and restful authentication. Ldap also Any examples ? Thank you for help. ...

LDAP Authentication from .NET using Proxy User

We want to use a "proxy user" to connect to an LDAP server (Active Directory, Novell, or otherwise) and then make sure that the user trying to log into the application has typed in an acceptable user name and password. I have got the code for connecting to LDAP just fine, but I'm at a loss as to how to check the user name and password. C...

What is the best OAUTH/Django library?

I use pyFacebook (which is not oauth) for facebook/django. What about oauth? What library do you guys absolutely recommend? I'm trying to implement a login system for LinkedIn: http://developer.linkedin.com/docs/DOC-1008#Authorization_in_the_LinkedIn_APIs ...

Self-hosted WCF REST service and Basic authentication

I've created a self-hosted WCF REST service (with some extra's from WCF REST Starter Kit Preview 2). This is all working fine. I'm now trying to add Basic authentication to the service. But I'm hitting some rather large roadblocks in the WCF stack which is preventing me from doing this. It appears that the HttpListener (which self-host...

Is Authentication between a PHP section and a Rails Section of a website possible?

The site is currently written in PHP. I want to add a new component by doing it in Ruby on Rail and then installing Rails in a sub-folder. If a user logs in the PHP portion of the website, can I customize the content for him/her in the Rails section without requiring a second login? I'm relatively new to Ruby on Rails so that's why I'm...

How to select N records for M group in MySQL?

This article elaborates how to select N records each group: http://www.xaprb.com/blog/2006/12/07/how-to-select-the-firstleastmax-row-per-group-in-sql/ The best solution for this kind of job is: set @num := 0, @type := ''; select type, variety, price, @num := if(@type = type, @num + 1, 1) as row_number, @type := type as du...

Using Central Authentication Service (CAS) with GlassFish?

Using an Existing Module ... Is there a authentication module for GlassFish 3 that integrates CAS into the server? Preferably this module conforms with JSR 196. How can I provide group information (user A is in Group X, Y, Z) with such a module? I would need a separate group database or webservice. ... or Writing a New Module? If no s...

Configure Drupal to force login for specific hostname (www. vs manage.) or protocol (HTTP vs HTTPS)

I have a Drupal site that is available at two different hostnames, one of which is only served using SSL. For example, http:// www.example.com is for viewing content and https:// manage.example.com is used by content contributors. I would like to configure Drupal to not show content through the https:// manage.example.com address unles...

Easiest way to get web page source code from pages that require logins -- C#

So I play an online game that's web based and I'd like to automate certain things with it using C#. Problem is that I can't simply use WebClient.DownloadData() because I need to be logged in to actually recieve the source. The other alternative was to use the built-in web browser control but that doesn't give me access to source code. An...

Recognize Website User without Login?

I'd like to create a piece of code that can be embedded on many different websites (widget). Is there any way that my code can identify a user without them logging in? I.e, can I use any of the established identity mechanisms floating around the web to reliably identify them across instances of this widget? I don't need to (nor shoul...

How to use authlogic to restrict access to static files/documents (such as .PDF)

I have a very simple Ruby on Rails app which uses acts_as_solr plugin to index and search PDF files. The basic idea of the app is: all PDF files located in myRoRapp/public/PDFfiles/example.pdf are full-text search-able. Usage of the webapp returns links to all PDFs that meet the search criteria. The app is user authenticated using nift...

What are the potential security issues in this implementation of SSO?

I'm currently researching cross-domain SSO implementations, and I may not be able to use a third party SSO provider. I found a custom implementation online that involves a series redirects and an encrypted querystring parameter. MrUser logs into http://www.foo.com MrUser clicks a link to http://www.bar.com/page.aspx MrUser is not aut...

How can I add SOAP Headers to a WSDL generated Borland C++ Builder 6 application.

Using a WSDL that requires a SOAP HEADER for Authentication (fragment below) code that gets generated when creating a web service client via the "WSDL Importer" has no concept of the Authentication Headers and there are no examples in BCB6 C++ Examples/WebServices directories that show how, and nothing on Web that I can find. Anyone wit...

Connecting the login flow between Android/iPhone app and the web.

When the person opens my app, I want to display a button. The user clicks this button, and it opens a browser (embedded, of course) inside the app, allowing the user to LOGIN through that web page. Of course, when the person logs in, it only logs in to that web server. The web service now knows that the user is logged in. As the user ...

WCF - How to configure netTcpBinding for NTLM authentication?

I know how to configure basicHttpBinding for NTLM authentication, but can't figure out a way to do the same for netTcpBinding. Does netTcpBinding support NTLM? If so, how to force WCF service to use NTLM? BTW a well known method using identity element for some reason didn't work at all. I am looking for something like this - clientC...

Poor Man's Authentication

I'm developing an ASP.NET web site for some small business. The site needs a password-protected area where the site owner will manage the site content. For the rest of the world, the site is completely read-only. I've designed and implemented the following scheme: A user wants to access some protected page. Every protected page inheri...

CASify JBoss Applications

Is there any Tutorial or Example on how to integrate CAS into JBoss (for EJB and WebClient Authentication) without using JBoss Portal ? ...

Single Sign On for Web Application and Application in Virtual Directory

To enable single sign-on for a web application and a web application in a virtual directory, I set the machinekey in both apps to the same: <machineKey validationKey="xxx" decryptionKey="yy" validation="SHA1" /> The single sign on works just fine, but existing users can't sign in any more; their passwords are rejected. The machinekey ...

Can't authenticate with different NTLM credentials in one session with java.net.URLConnection

When I access a HTTP server using the standard Java API (java.net.URLConnection), the credentials are "cached" after the first successful authentication, and subsequent calls to Authenticator.setDefault() have no effect. So, I need to restart the application in order to use different credentials. I don't observe this effect when Basic A...