Re: Sessions and more info

2008-09-25 Thread Gus Denton
no luck on that front either as we host a number of top level serices so the main uni cert would have to cover us. Trying to organise that.. well and end to poverty just might be easier to arrange ! No No cert server, and no wildcard cert for the institution though I am told that this has

Re: Sessions and more info

2008-09-25 Thread James Holmes
I know what you mean (I work in a Uni too), but it's really not too hard to organise as far as the technology goes: 1) Get cert from DigiCert 2) Install it The cost is reasonable and it solves so many issues; we were able to combine a wildcard cert for our prod servers with wildcard DNS for our

Re: Sessions and more info

2008-09-22 Thread Gus Denton
No No cert server, and no wildcard cert for the institution though I am told that this has been under discussion for some mind numbingly extended period.. I am working in a uni and we have multiple sites (on the same Your university might have a certificate server. This would let you get

RE: Sessions and more info

2008-09-22 Thread Dave Watts
No No cert server, and no wildcard cert for the institution though I am told that this has been under discussion for some mind numbingly extended period.. As long as all your own sites are within a single subdomain, you could just get the wildcard cert yourself for that subdomain. Dave

Re: Sessions and more info

2008-09-21 Thread Gus Denton
It is the same application (with the same name).. It is the same directory on the same server runnig under IIS 6. There are two site 'definitions' within IIS The first site runs (unsecured) on 1 ip and has has the application directory as it's home. The second site is on a diffrent ip but has my

Re: Sessions and more info

2008-09-20 Thread Mike Chabot
Gus, The session variables would be specific to the application name on the server, not just the server. Some options: Log into every application on the main login page by writing a cfapplication tag, then set the session variables, then repeat for every application. Log into every application

Re: Sessions and more info

2008-09-20 Thread Judah McAuley
If this is for an internal application, then I'd suggest creating your own SSL certs which you can do for free. Your users will get a warning about a untrusted certificate the first time around, but you can explain to them that they need to trust it permanently adn then the error will not recur

RE: Sessions and more info

2008-09-20 Thread Dave Watts
I am working in a uni and we have multiple sites (on the same server) requiring authentication. We simmply cannot afford to purchase a cert for each site (domain and separate IP), so my solution was to created a single site with a cert which has the other sites available as virtual