re: Authenticating against .NET 2.0 website

2010-03-12 Thread Jason Fisher
Have them both use the same database for user / auth lookups. That's the simplest, assuming that both servers can access at least one of the SQL Servers. If that's a challenge, then build a quick webservice to wrap the authentication call, which is a good idea in any case, and then allow

Re: Authenticating against .NET 2.0 website

2010-03-12 Thread Matthew
Thanks Jason, yes I thought of web service too, as I do not have access to the databse shouldn't they be the one creating the web service and I consuming it? Also aren't webservices easily spoofed? Matt. On 12 Mar 2010, at 16:09, Jason Fisher ja...@wanax.com wrote: Have them both use the

RE: Authenticating against .NET 2.0 website

2010-03-12 Thread Duane Boudreau
Do you have the ability to modify the .Net authentication procedure? If you do, you could move all the session info in to the database and modify the .Net authentication to check your session table before issuing the challenge. If it's the same domain you could store everything in a cookie

Re: Authenticating against .NET 2.0 website

2010-03-12 Thread Dave Watts
Thanks Jason, yes I thought of web service too, as I do not have access to the databse shouldn't they be the one creating the web service and I consuming it? Yes, they'd have to create that. If they're unwilling to do this, you could probably accomplish what you need by interacting with

Re: Authenticating against .NET 2.0 website

2010-03-12 Thread Matthew Allen
OK thanks Dave - I'll have to go for webservices. Thanks all. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive:

Re: Authenticating against .NET 2.0 website

2010-03-12 Thread Jason Fisher
...@figleaf.com Sent: Friday, March 12, 2010 11:43 AM To: cf-talk cf-talk@houseoffusion.com Subject: Re: Authenticating against .NET 2.0 website Thanks Jason, yes I thought of web service too, as I do not have access to the databse shouldn't they be the one creating the web service and I consuming it? Yes