authentication

Windows 7, SVN client authentication

Recently I installed new windows 7 in my system and then SVN client. Now when I gave my repository path and checked out the code then it directly checked out the code, without asking the password. I am sure I have configured my repository to ask for the password since I other users of that repository still requires to give their password...

Using MySQL's Membership Provider without autogenerateschema

Hi, How can one use his already existing ACL schema with MySQL's Membership Provider connector? I for one do not want to use the autogenerated table schema, but am happy to alter my own tables to adapt to ASP.NET's rules. For instance I want to use customn table names. How can I point the connector to use them? Thank you. ...

Interacting with google appengine from C#

I'm writing a google appengine application, which stores data and has a web front end. I want to be ableto pull down this data in a C# program. This means I need to authenticate with the site (users must be logged in to view the data). How can I authenticate like this? I tried setting credentials on the WebClient but I keep getting the g...

Restrict access to web site based on Referrer, cookies or something else

We have a scenario whereby we are hosting an ASP.NET MVC web site on behalf of someone else. The customer in this case wants us to restrict access to the web site, to those users who have logged in to their main portal. They should then only be able to get to our web site via a link from that portal. At this point I'm not yet sure what...

How to make sure that my ajax call pulls authenticated content

Hello guys, I am making an Ajax call within my page to a DB and pulling products that have images included. Here is the ajax call that i'm making: $.ajax({ type : "GET", url : "**https**://www.mydomain.org/getRow.php", dataType: 'html', success: function (msg) { $(".drag-desired").html(msg); $.event...

How does OAuth work?

I mean not how is it implemented but rather what steps should user pass? I'm working with Photobucket now and I found in its docs that I should generate new token for every request due to token can expire in certain (but secret) period of time. How does this generation works? Do I need separate request for generating token? ...

LDAP - Authlogic

I have a ROR application with authlogic and LDAP, i follow the how to oh authologic and this http://pastie.org/385199 but the method (def valid_ldap_credentials?(password_plaintext)) is not called....any help ? ...

Apache <Files> with Require to exempt certain Files

I setup a .htaccess file to require authentication for a directory. I would like to exempt certain files (csv) to avoid some issues with downloading. I can limit the authentication to the files by doing: <files ~ "\.csv$"> require valid-user </files> But how can I negate(!) them so ALL files except csv files require authenticati...

Can an iphone app transparently connect to an https site, using a DER certificate shipped with the app?

Hello, I would like my app to connect to an https site, without user input required. So, I would like to send the app a certificate that the app will install in the keychain, and allow it to connect to the https site without the user getting involved. How can I do this? Thanks! ...

How to set up local copies of development sites with NTLM authentication

I'm a developer on a site that uses NTLM (Windows integrated) authentication. It's a Coldfusion-based intranet. Authentication is to the Active Directory domain. The site is deployed on IIS 6, and I'm trying to work with a development copy of it on my Vista development box, running IIS 7. I have enabled Windows Authentication and d...

How can I use the Whirlpool hash with Django authentication ?

We have a system written in PHP where account passwords are stored as the first 128 chars of a whirlpool hash of the password. I'd like to transition to handling the logins with Django without changing the database or asking users to change their passwords. Also, I'd prefer to stick with whirlpool vs. the less secure hashes Django has b...

What is the best authentication script?

Hi, I'm planning on making some dynamic PHP websites and I need a free Authentication system that allows me to create control panel for these sites' admins. It should contain : Remember password Lost password Maximum login attempts per specific interval users Management Thanks. ...

Which windows account is used to upload files to SharePoint document library?

I am using the following code WindowsIdentity wIdb4 = WindowsIdentity.GetCurrent(); string name = wIdb4.Name; in a workflow to show which user account is being used to upload a document. When i write the above mentioned string in a workflow history event, it always returns NETWORK SERVICE, even if i am logged in using the site...

Why is kerberos defaulting to NTLM in WCF?

Got a simple WCF demo app that has two console projects--host and client. Both are running on my machine (win 7 box). I'm using the netTcpBinding, which uses windows authentication. The issue is that authentication is downgrading to NTLM from kerberos, and I can't figure out why. If I use <clientCredentials> <windows all...

Securing communication from android to a web service

I'm a relative newbie to web and mobile development and especially to security so obvious answers are still appreciated. I want my android app to be able to log in to a simple web service with a username and password. What's the best way to send this information securely and keep the user logged in for an entire session? ...

spring security AuthenticationManager vs AuthenticationProvider?

Can someone tell me different between an AuthenticationManager and an AuthenticationProvider in spring security? How are they used and how are they called. It is my understanding that a SecurityFilter will call the AuthenticationManager to authentication an Authentication object? But then where does the AuthenticationProvider come into ...

simple authentication scheme

I have an online registry of professionals with about 300 members. These are smart people, but non technical. Currently, if somebody forgets their email address, the system resends it to the email address they registered with. The problem is that people change their email addresses over time, then forget their password, and can't receiv...

Classic ASP Request.ServerVariables("LOGON_USER") returning wrong username

Hi, Classic ASP Request.ServerVariables("LOGON_USER") is returning wrong username. Here is the scenario: I have two accounts on the domain, one for administration and one for normal use. The admin account is set as admin (in the Administrators group) on the server where the ASP script is running on. Server is Windows 2003 running IIS 6...

Session management between thick client and server?

My application is a Eclipse Rich Client and I would like to add authentication and authorization features to. My Users and roles are stored in a database and my application also has a web based admin console which lets me manage users and roles. I am leveraging Spring security on this admin console. So here's my requirement: I would ...

Authentication / Denying access to files in directory with php

I have a directory of files that logged-in users can upload to and access. Some of the files are public, and others are private - for internal access only. The filenames and access settings are saved in a database. Can anybody give me some resources or show me an example of how i can use session data (and .htaccess?) to allow access of ...