Re: Alternative to cgi.http_referer - single signon

2004-08-31 Thread Jochem van Dieten
Brian Meloche wrote:

 At the office, we've run into a bit of a snag with a script that a
 consultant did for us that authenticates from the URL of a referring
 page hosted on a third party site to auto-generate single signon
 authentication, so that an account from their site is automatically
 generates an account on our system and doesn't require the user to
 sign into our system.This feature is a requirement to our
 application by the third party (our client).
 
 In this case, the consultant's code tries to authenticate from
 cgi.http_referer.The problem we're getting is that we're not getting
 back a value.
 
 I have looked around the web, on this list and elsewhere, and know
 that this is a potential problem both with firewalls and certain
 browsers, but I haven't been able to find an alternative.We NEED an
 alternative, and we need it ASAP.

HTTP Digest Authentication can be set up to authenticate for 
multiple domains / servers, see RFC 2617.

Jochem
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: Alternative to cgi.http_referer - single signon

2004-08-31 Thread Mark A Kruger
Brian,

I'm not sure you will get consistency from anything in cgi.I'd say you are
going to have to pass something else - a shared key of somekind between you
and the host.This could be done with _javascript_ point to a page on your
server (src="" that appends a url string to the link or
hidden variable.

-Mark

-Original Message-
From: Brian Meloche [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 31, 2004 11:54 AM
To: CF-Talk
Subject: Alternative to cgi.http_referer - single signon

At the office, we've run into a bit of a snag with a script that a
consultant did for us that authenticates from the URL of a referring
page hosted on a third party site to auto-generate single signon
authentication, so that an account from their site is automatically
generates an account on our system and doesn't require the user to
sign into our system.This feature is a requirement to our
application by the third party (our client).

In this case, the consultant's code tries to authenticate from
cgi.http_referer.The problem we're getting is that we're not getting
back a value.

I have looked around the web, on this list and elsewhere, and know
that this is a potential problem both with firewalls and certain
browsers, but I haven't been able to find an alternative.We NEED an
alternative, and we need it ASAP.

Any suggestions?

--
Sincerely,

Brian Meloche
http://www.brianmeloche.com
http://www.clevelandmmug.org (currently partially down)
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]