How can I disable the windows authentication mode of SQl Server and restrict it to ask for user and Password every time and no windows authentication. for security purposes
Can someone point me in the right direction in regards to making an api use basic http authentication?
I am creating a restful api with symfony but would like to require users to be logged in to get certain data. I would also like many of these methods be dependent on the the username in the authentication process in order to get some of the data (using the username from the credentials to get all of a users friends)
Thanks!
Hi!
I implemented FilterInvocationSecurityMetadataSource.
in getAttribute, i am trying to extract the Authentication object to achieve the user and get his allowed views from the database:Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();
but the authentication is null! why? how can i achieve it?
I'm using restful authentication in rails. Now I just want to change it to Authlogic.
I used
acts_as_authentic do |c|
c.transition_from_restful_authentication = true
end
and changed the password and salt field to 128 characters.But, if I create a new user crypted password length is 40 characters length(Its not changing to 128 as in authlogic).
Plz suggest me, how to change from restful to Authlogic from the start.
i.e I have restful authentication now.(how to change it to authlogic..plz explain from start)
Is there a one and true way to add authentication in Pylons? I've seen so many different ways, but most of them are either outdated or too complex. Is there a tutorial somewhere that explains how to add authentication in a good and solid way?
I am using openid using openid4java. My return url is a servlet
After authentication when the return url is invoked by the openid provider after successfully authentication , i want the USERNAME from the open id url like
https://me.yahoo.com/USERNAME
the above url i am recieving from parameter openid.identity i cannot get username directly since user is entering user name on the openid provider site.
Please give any suggestion
Regards, Zeeshan
i'm looking for a rails plugin for open id authentication.
I'm using restful-authentication
Can you tip me any plugin?
Do you know any tutorials for using these plugins?
thanks
I have a Rails forum product that resides under the subdomains of my customers (i.e. http://forum.customer.com). Their main site has a CMS and an authentication system, and my forum product has a separate authentication system. Is there an elegant way to have "cross-signins" across these systems? I want someone already logged into the main CMS to seamlessly (as possible) transition into my product.
hello,
i have one webservice given by my client ...
problem is this webservise require Authentication...without username and password no one get data from this url...so how can i do authentication this webservice .
this is same like u r gling to login to facebook or twitter then first we enter username and password for authenticate . how can i do this same. i have username and password for this webservise can i pass this static data in code ?
I was tasked with implementing either a SAML authentication service, or a EWS (Entitlement Web Service Authentication) service, and I was wondering if anyone has any samples or documentation on such options. I am almost 100% sure that SAML is out of the question due to the time frame of the project.
EWS has been difficult to find online, I can't seem to find any good samples or documentation on implementing such service.
hi all,
we have to create SharePoint extranet sites by using SharePoint foundation 2010 for clients.we have to use Claims based authentication.So which one is better FBA or SAML authentication.
please tell me which one is better what are the advantages and disadvantages are there for both.
hi
is there any different in Connection string
between SQL server Authentication and Windows Authentication
if yes, can i get a sample connection string for this ?
thank's in advance
hello,
can any one tell me how to do form authentication in asp.net mvc? i had done form authentication for built in database but i dont know how to use it with ADO.net entity model. thank you
I'm using launching firefox from the command line in a script to get snapshots of pages. These pages have basic http authentication. When using:
firefox http://user:[email protected]
Either a dialog appears, or authentication doesn't work at all.
Is there any option to make firefox open the page without showing the dialog?
Is anyone else having problems with the iPad IPSec (Cisco) VPN configuration?
I've configured a Cisco VPN connection to a PIX 501 firewall on a 32GB Wifi Apple iPad. This is done in Settings - General - Network - VPN - Add VPN Configuration - IPSec tab. When everything is set up properly and I attempt to connect I just get a popup that says "Enter your user authentication" with no fields to enter either piece of info, and just OK and Cancel buttons.
I've read about similar problems with the VPN client built into Mac OS X and the iPhone 3GS but never with the iPad. Does anybody know a solution? I'm not afraid to change the configuration of my PIX 501 if that's necessary.
I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones connect.
I've installed the CA cert and a client certificate on the iPhone with a profile using iPCU, along with the VPN configuration. Then connecting gives the error "Could not validate the server certificate". Additionally, the ASA logs the error "Received encrypted Oakley Informational packet with invalid payloads".
FWIW, I receive the same invalid payload error when trying to use the Snow Leopard IPsec client to connect.
Has anyone successfully gotten the iPhone IPsec client to work with certificate auth?
Hi All,
I'm trying to set up an environment for my TS gateway server where the authentication for the initial login to the TS gateway server is handled by a RADIUS server (as determined by NPS), then the user uses standard Windows Auth to log in to their destination machine.
I have the server successfully passing the auth to the RADIUS server, but only after it does a Windows auth first. The credentials will not match between the Windows Server and the RADIUS server, so the RADIUS auth always fails, and the TS Gateway server will not forward the request to the RADIUS server unless the Windows Auth succeeds.
Does anyone know how to disable the Windows Auth requirement on a TS Gateway server? This is a pretty vanilla SBS 2008 box.
I have an Apache James 2.3.2 email server running on RHEL 5. I have been connecting to it successfully for months using Thunderbird (currently version 12.0.1).
I am attempting to connect to the same account using Apple's Mail 6.5. On the first dialog, to add an account to Apple's Mail, it asks for full name, email address, and password. It then asks for an incoming mail server. I put account type equal to POP, the incoming mail server equal to the host in my email address, and my username and password.
It comes back with the error: "Logging in to the POP server "" failed. Make sure the user name and password you entered are correct, then click Continue. If the information isn't correct, you cannot receive messages."
While the dialogs are different in Thunderbird, I believe that I am giving it exactly the same parameters, and succeeding with authentication.
I have an Apache James 2.3.2 email server running on RHEL 5. I have been connecting to it successfully for months using Thunderbird (currently version 12.0.1).
I am attempting to connect to the same account using Apple's Mail 6.5. On the first dialog, to add an account to Apple's Mail, it asks for full name, email address, and password. It then asks for an incoming mail server. I put account type equal to POP, the incoming mail server equal to the host in my email address, and my username and password.
It comes back with the error: "Logging in to the POP server "" failed. Make sure the user name and password you entered are correct, then click Continue. If the information isn't correct, you cannot receive messages."
While the dialogs are different in Thunderbird, I believe that I am giving it exactly the same parameters, and succeeding with authentication.
Following the recent security advisory, I'm reconfiguring our VPN servers and having trouble.
We're using Windows 2008 R2 server for VPN services, running RRAS and NPS on the same server and configure it to use PEAP-EAP-MSCHAPV2 authentiation for all tunnel type(PPTP, L2TP, IKEv2, SSTP), which previously allowed plain MSCHAPv2.
But Apple products, MacOS and iOS cannot connect to VPN after this change. I tried to install root certificate used in PEAP transaction but no change.
Does anyone know whether MacOS/iOS supports PEAP-EAP-MSCHAPv2 authentication in PPTP/L2TP? If so any tips to make it work? (I know PEAP-EAP-MSCHAPv2 is supported in WPA/WPA2 enterprise)
Regards.
I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the correct error message (407). Then, I set the correct name/password and everything worked correctly.
From there, I kept the correct information in the receive port but put an invalid name/password into the send adapter but the process completed successfully (should have failed with 407).
I've ensured that both the recieve and send ports are not bypassing the proxy for local addresses.
So the only thing that seems to make sense is if TMG is caching the authentication request coming from the machine I'm working on.
Is this thinking correct, and if so, does anyone know how to disable it in TMG?
I'm trying to get Cyrus IMAP (v 2.2 on Ubuntu 9.04) setup and working, but I'm having a bit of trouble getting the login working correctly.
I've created a mailbox for my test user "nrahl":
cm user/nrahl
and then created a password:
$ saslpasswd2 nrahl
I'm attempting to connect to the mailbox using Thunderbird. I'm using the machine's LAN IP address as the host, and "nrahl" as the username. It connects to the server and prompts me for the password. When I enter it, I get "Login to server failed." in Thunderbird, and /var/log/mail.log shows:
Apr 15 19:20:01 IMAP cyrus/imap[1930]: accepted connection
Apr 15 19:20:09 IMAP cyrus/imap[1930]: badlogin: [192.168.5.21] plaintext nrahl SASL(-13): authentication failure: checkpass failed
Part of /etc/imapd.conf with comments removed:
sieveusehomedir: false
sievedir: /var/spool/sieve
#mailnotifier: zephyr
#sievenotifier: zephyr
#dracinterval: 0
#drachost: localhost
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
#allowapop: no
#sasl_maximum_layer: 256
#loginrealms: example.com
#virtdomains: userid
#defaultdomain:
sasl_pwcheck_method: saslauthd
#sasl_auxprop_plugin: sasldb
sasl_auto_transition: no
UPDATE:
When setting:
sasl_pwcheck_method: alwaystrue
in /etc/imapd.conf, login works correctly. So I'm assuming the issue is saslauthd related.
I am evaluating the possibilities of moving my organisation to Mercurial, however I am stumbling on 2 basic requirements which I can't find proper pointers to.
How do I set up Mercurial's central repository to authenticate users with the central active directory and only allow them to push or pull if they have the right credentials?
How do I set up a Mercurial project repository to only allow users pertaining to a specific group to push / pull source code? We need this to have per-project authorisation.
On which HTTP servers (IIS or Apache etc.) are the above 2 requirements supported?
Apologies if I am asking something obvious or if I am missing something fundamental about how authentication and authorisation works.
Thanks.
I'm trying to automate a very periodic git add/commit/push cycle using a shell script and cron under OS X 10.8.5. The script is as basic as one would expect it to be:
cd /my/directory
git add .
git commit -m "a commit message with the date"
git push -u origin master
I've tried running it both as root as well as a non-root user. When I do this manually, I get a dialog box from OS X requesting that I authenticate the operation.
Running the script (either using cron or just using sh) ends up sending a message (via mail) to whichever user's cron executed the script saying that it was unable to write a file in the .git directory because of a permissions issue (which is most likely manual execution requires authentication).
Is there any way to circumvent this issue, or give the script permission to perform this operation without having me intervene each time?
I'm trying to get Cyrus IMAP (v 2.2 on Ubuntu 9.04) setup and working, but I'm having a bit of trouble getting the login working correctly.
I've created a mailbox for my test user "nrahl":
cm user/nrahl
and then created a password:
$ saslpasswd2 nrahl
I'm attempting to connect to the mailbox using Thunderbird. I'm using the machine's LAN IP address as the host, and "nrahl" as the username. It connects to the server and prompts me for the password. When I enter it, I get "Login to server failed." in Thunderbird, and /var/log/mail.log shows:
Apr 15 19:20:01 IMAP cyrus/imap[1930]: accepted connection
Apr 15 19:20:09 IMAP cyrus/imap[1930]: badlogin: [192.168.5.21] plaintext nrahl SASL(-13): authentication failure: checkpass failed
Part of /etc/imapd.conf with comments removed:
sieveusehomedir: false
sievedir: /var/spool/sieve
#mailnotifier: zephyr
#sievenotifier: zephyr
#dracinterval: 0
#drachost: localhost
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
#allowapop: no
#sasl_maximum_layer: 256
#loginrealms: example.com
#virtdomains: userid
#defaultdomain:
sasl_pwcheck_method: saslauthd
#sasl_auxprop_plugin: sasldb
sasl_auto_transition: no