RE: [U2] validate active directory username password from within unidata?
From: Bruce McAdoo Any ideas how I might be able to validate active directory username password from within unidata? I'd encrypt the data in BASIC, pass it to a windows box, and execute an EXE that just does the authentication and returns a yes or no (also encrypted to deter corruption in the middle). This should be fairly straightforward. There are lots of code samples on the net for Active Directory. I recommend against shelling out with the user ID and password in plain text as this is very insecure. Everything can/should be wrapped in a BASIC subroutine to make the plumbing completely transparent to the application. This approach works for a wide range of these how do I... questions. This brings up a question: Does anyone know if we can link a C++ or .NET DLL into the UD or UV executables? Maybe call via a user exit or some other mechanism directly from BASIC? Shelling out is very inelegant, slow, and can be insecure. I have a blog coming out soon on this concept but haven't done this with U2. TIA Tony Gravagno Nebula Research and Development TG@ remove.pleaseNebula-RnD.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
Further clarification of the requirements would be useful. When and how often do you want to do this? Do you want to use an API or using the 'shell' okay? Is it to be used on Windows UNIX servers? Does need to work on UD UV? Do you want to 'spend' any money to get the 'perfect' or quick 'n' dirty and 'free' is what you're after?? If you're simply Windows-only you can use the API provided by BCI (SQLConnect) to authenticate AD users (never tried it, but it *should* work :) YMMV). This would work on UD UV on Windows. In UV10.3 IBM has introduced PAM support on the UNIX platform, not sure about UD. Regards, David -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of Bruce McAdoo Sent: Wednesday, 18 March 2009 11:44 AM To: u2-users@listserver.u2ug.org Subject: [U2] validate active directory username password from within unidata? Any ideas how I might be able to validate active directory username password from within unidata? ** IMPORTANT MESSAGE * This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ** --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] validate active directory username password from within unidata?
Any ideas how I might be able to validate active directory username password from within unidata? Contact br...@cross.net.au and see if he is still selling the LDAP interface I wrote for him. This will let you use a unibasic subroutine to query active directory including validating a username and password. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
Using WINDOWS server, 'shell' would be okay, and quick 'n' dirty and 'free' is preferred. Ideal would be subroutine in unidata accepts username and password, checks active directory, and returns 'OK' or not 'OK'. Bruce W. McAdoo Wagner Brown, Ltd. bmca...@wbltd.com -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of Hona, David Sent: Wednesday, March 18, 2009 2:34 AM To: u2-users@listserver.u2ug.org Subject: RE: [U2] validate active directory username password from within unidata? Further clarification of the requirements would be useful. When and how often do you want to do this? Do you want to use an API or using the 'shell' okay? Is it to be used on Windows UNIX servers? Does need to work on UD UV? Do you want to 'spend' any money to get the 'perfect' or quick 'n' dirty and 'free' is what you're after?? If you're simply Windows-only you can use the API provided by BCI (SQLConnect) to authenticate AD users (never tried it, but it *should* work :) YMMV). This would work on UD UV on Windows. In UV10.3 IBM has introduced PAM support on the UNIX platform, not sure about UD. Regards, David -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of Bruce McAdoo Sent: Wednesday, 18 March 2009 11:44 AM To: u2-users@listserver.u2ug.org Subject: [U2] validate active directory username password from within unidata? Any ideas how I might be able to validate active directory username password from within unidata? ** IMPORTANT MESSAGE * This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ** --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
Hi, You can call DLLs from UniData on Windows with the CALLC function. It's in the Developing UniBasic Applications manual under Linking Programs with UniData. I think there's a Universe equivalent, but as I don't use UV, I've never needed to check. This links dynamically, though - you only need to link a library into the executable if it's under Unix. This works with native code, but I don't know if it works with .Net DLLs. Adam This brings up a question: Does anyone know if we can link a C++ or .NET DLL into the UD or UV executables? Maybe call via a user exit or some other mechanism directly from BASIC? Shelling out is very inelegant, slow, and can be insecure. I have a blog coming out soon on this concept but haven't done this with U2. TIA Tony Gravagno This electronic message contains information from CACI International Inc or subsidiary companies, which may be confidential, proprietary, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named above. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify us immediately at postmas...@caci.co.uk Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure they are actually virus free. CACI Limited. Registered in England Wales. Registration No. 1649776. CACI House, Avonmore Road, London, W14 8TS. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
Tony This brings up a question: Does anyone know if we can link a C++ or .NET DLL into the UD or UV executables? Maybe call via a user exit or some other mechanism directly from BASIC? Shelling out is very inelegant, slow, and can be insecure. You can link C code to UniVerse using GCI, but it's messy: easier on Windows where the code is loaded as a DLL but you still need to have GCI build the wrapper code for the call and recompile. Not C# or java though, both of which would be much more useful. I guess Delphi and FreePascal would be possible if you took the time to work out the calling conventions. For calling native code, several of my current products (e.g. mvPDF, mvDistributor) run as Windows services accessed over socket connections from UniVerse/UniData et al. Not the most elegant perhaps, but transportable and real time. Brian --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
From: Brian Leach This brings up a question: Does anyone know if we can link a C++ or .NET DLL into the UD or UV executables? Maybe call via a user exit or some other mechanism directly from BASIC? Shelling out is very inelegant, slow, and can be insecure. You can link C code to UniVerse using GCI, but it's messy: easier on Windows where the code is loaded as a DLL but you still need to have GCI build the wrapper code for the call and recompile. Not C# or java though, both of which would be much more useful. I guess Delphi and FreePascal would be possible if you took the time to work out the calling conventions. Have you tried to load managed code through a COM Shim? I do this sort of thing all the time with MS Office but I'm not sure if GCI would choke if it does anything special. For calling native code, several of my current products (e.g. mvPDF, mvDistributor) run as Windows services accessed over socket connections from UniVerse/UniData et al. Not the most elegant perhaps, but transportable and real time. I do exactly the same. Our cross-platform products that allow MV BASIC apps to be clients to other apps and the internet call to a service on a middle-tier windows box, that does the comms, and the results are returned back to BASIC. From the developer perspective it's all BASIC, and I don't need to work with shims, linked DLLs, or platform-specific utilities like CallHTTP. I'll use what's available when required of course, but I don't think I've written platform-specific code for about 4 years now and I'm quite happy with that. Thanks for the advice. T Tony Gravagno Nebula Research and Development TG@ remove.pleaseNebula-RnD.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] validate active directory username password from within unidata?
Bruce McAdoo wrote: Any ideas how I might be able to validate active directory username password from within unidata? --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ We use Centeris Likewise Enterprise --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] validate active directory username password from within unidata?
What platform is UD running on . I assume *nix? Do you need to do this, or is it enough that the host OS has validated logon credentials against AD? Ross Ferris Stamina Software Visage Better by Design! -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2- us...@listserver.u2ug.org] On Behalf Of Bruce McAdoo Sent: Wednesday, 18 March 2009 11:44 AM To: u2-users@listserver.u2ug.org Subject: [U2] validate active directory username password from within unidata? Any ideas how I might be able to validate active directory username password from within unidata? --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
