Re: Single login/sign-on for different web apps?

2002-01-16 Thread Steve Piner
Vsevolod Ilyushchenko wrote: Yes, but I still should be able to propely handle people who go to any of the protected sites first thing in the morning. I don't think I can get away with only exit-point authentication that you propose. If the entrance-point authentication works well, there

Re: weird problem. Lost of the POST data

2002-01-16 Thread Robert Landrum
At 3:11 PM +0100 1/16/02, Oscar Serrano wrote: Here I put the beggining of the file: #!/usr/bin/perl -w use CGI; use strict; use varcomunes; #library of my own use lib $LIBRERIAS_AT; use EnlacesAT; #library of my own use Idioma; #library of my own use DBI; use OrdenesComunes; #library of my own

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
-Mensaje original- De: Ged Haywood [mailto:[EMAIL PROTECTED]] Enviado el: miercoles, 16 de enero de 2002 23:30 Para: Oscar Serrano CC: [EMAIL PROTECTED] Asunto: Re: weird problem. Lost of the POST data Thank you Ged for your detailled information. I'm now debugging my scripts.

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
-Mensaje original- De: Perrin Harkins [mailto:[EMAIL PROTECTED]] Enviado el: jueves, 17 de enero de 2002 0:06 Para: [EMAIL PROTECTED]; Oscar Serrano Asunto: Re: weird problem. Lost of the POST data There is something that may give a clue. When I restart apache, it takes some

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Vsevolod Ilyushchenko
3) Perl-based applications can just use the module and the common key to decrypt the contents of the cookie to find the authenticated username. If the cookie is not present redirect to the central authentication page, passing in the URL to return to after authentication.

Re: weird problem. Lost of the POST data

2002-01-16 Thread Perrin Harkins
Ummm yes... you know, I'm using the Template Toolkit. Try using the Perl stash instead of the XS stash, and see if your problem goes away. It seems as if the httpd child executes the processing of the template so fast that CGI.pm has no time to get the POST data. I don't think so. It

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Paul Lindner
On Wed, Jan 16, 2002 at 06:56:37PM -0500, Vsevolod Ilyushchenko wrote: 3) Perl-based applications can just use the module and the common key to decrypt the contents of the cookie to find the authenticated username. If the cookie is not present redirect to the central

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
-Mensaje original- De: Robert Landrum [mailto:[EMAIL PROTECTED]] Enviado el: jueves, 17 de enero de 2002 0:26 Para: Oscar Serrano; [EMAIL PROTECTED]; [EMAIL PROTECTED] Asunto: Re: weird problem. Lost of the POST data At 3:11 PM +0100 1/16/02, Oscar Serrano wrote: Here I put the

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
-Mensaje original- De: Perrin Harkins [mailto:[EMAIL PROTECTED]] Enviado el: jueves, 17 de enero de 2002 1:01 Para: Oscar Serrano; [EMAIL PROTECTED] Asunto: Re: weird problem. Lost of the POST data Ummm yes... you know, I'm using the Template Toolkit. Try using the Perl stash

Re: weird problem. Lost of the POST data

2002-01-16 Thread Perrin Harkins
Well all my modules are written in Perl. When you say some C code you mean the C code in DBI, or CGI or Template, don't you? Yes. That's why I suggest trying Template with the Perl stash instead of the XS one. - Perrin

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Mark Maunder
Daniel Little wrote: From: Mark Maunder [mailto:[EMAIL PROTECTED]] Here's one idea that worked for me in one application: 1) assume that all hosts share the same domain suffix: www.foo.com www.eng.foo.com www.hr.foo.com 2) Define a common

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Medi Montaseri
I think Netegrity single sing-on system modifies the HTTP server (possible with mod_perl) to overload or override its native authoentication and instead contact a Host, Database or LDAP to get the yes or no along with expiration data it then sends its finding to the CGI by sending additonal

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Medi Montaseri
I wonder if one could change the HTTP Server's behavior to process a distributed version of "AuthUserFile" and "AuthGroupFile". That instead of AuthUserFile "/some/secure/directory/.htpasswd One would say AuthUserFile "http://xyz.com/some/directory/htpasswd" Then write a GUI (web) inteface to

Summary: CGI.pm problems in BEGIN blocks

2002-01-16 Thread Dave Morgan
Hi All, Basically comes down to you cannot call the CGI.pm module in a functional style within a block of code that is loaded at startup by a mod-perl enabled web server. Using CGI.pm in an OOP way eliminates the problem. ### # this code causes

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Gunther Birznieks
Of course, the best authentication system for banking I've seen is from UBS. They send you a scratchlist of around 100 numbers. Every time you login you use one of the numbers and cross it off. Very slick. Does that really work in practice? That sounds really annoying. Is this for business

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Aaron Johnson
I hadn't really taken a look at personal certificates until this thread came up. It looks like thawte is offering personal certificates at no charge. http://www.thawte.com/getinfo/products/personal/contents.html This would make it a more likely method since lots of site traffic wouldn't want

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Andrew Ho
Hello, PLOf course, the best authentication system for banking I've seen is PLfrom UBS. They send you a scratchlist of around 100 numbers. Every PLtime you login you use one of the numbers and cross it off. Very PLslick. GBDoes that really work in practice? That sounds really annoying. Is this