Re: Single login/sign-on for different web apps?

2002-01-16 Thread Andrew Ho
Hello, PL>Of course, the best authentication system for banking I've seen is PL>from UBS. They send you a scratchlist of around 100 numbers. Every PL>time you login you use one of the numbers and cross it off. Very PL>slick. GB>Does that really work in practice? That sounds really annoying. Is t

Re: Summary: CGI.pm problems in BEGIN blocks

2002-01-16 Thread Perrin Harkins
> I can't believe no-one else has run in to this. Something > to do with the default instantiation of CGI is my guess. It's actually highly unusual to do anything with CGI other than compile it inside a BEGIN block. You may very well be the first person who ever tried. Typical usage is to do i

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Aaron Johnson
I hadn't really taken a look at personal certificates until this thread came up. It looks like thawte is offering personal certificates at no charge. http://www.thawte.com/getinfo/products/personal/contents.html This would make it a more likely method since lots of site traffic wouldn't want to

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Gunther Birznieks
> >Of course, the best authentication system for banking I've seen is >from UBS. They send you a scratchlist of around 100 numbers. Every >time you login you use one of the numbers and cross it off. Very >slick. Does that really work in practice? That sounds really annoying. Is this for busi

Summary: CGI.pm problems in BEGIN blocks

2002-01-16 Thread Dave Morgan
Hi All, Basically comes down to you cannot call the CGI.pm module in a functional style within a block of code that is loaded at startup by a mod-perl enabled web server. Using CGI.pm in an OOP way eliminates the problem. ### # this code causes proble

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Medi Montaseri
I wonder if one could change the HTTP Server's behavior to process a distributed version of "AuthUserFile" and "AuthGroupFile". That instead of AuthUserFile "/some/secure/directory/.htpasswd One would say AuthUserFile "http://xyz.com/some/directory/htpasswd" Then write a GUI (web) inteface to thi

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Medi Montaseri
I think Netegrity single sing-on system modifies the HTTP server (possible with mod_perl) to overload or override its native authoentication and instead contact a Host, Database or LDAP to get the yes or no along with expiration data it then sends its finding to the CGI by sending additonal H

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Mark Maunder
Daniel Little wrote: > > From: Mark Maunder [mailto:[EMAIL PROTECTED]] > > > > > Here's one idea that worked for me in one application: > > > > > > 1) assume that all hosts share the same domain suffix: > > > > > > www.foo.com > > > www.eng.foo.com > > > www.hr.foo.com > > > >

Re: weird problem. Lost of the POST data

2002-01-16 Thread Perrin Harkins
> Well all my modules are written in Perl. When you say some C code you mean > the C code in DBI, or CGI or Template, don't you? Yes. That's why I suggest trying Template with the Perl stash instead of the XS one. - Perrin

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
> -Mensaje original- > De: Perrin Harkins [mailto:[EMAIL PROTECTED]] > Enviado el: jueves, 17 de enero de 2002 1:01 > Para: Oscar Serrano; [EMAIL PROTECTED] > Asunto: Re: weird problem. Lost of the POST data > > > > Ummm yes... you know, I'm using the Template Toolkit. > > Try using the

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
> -Mensaje original- > De: Robert Landrum [mailto:[EMAIL PROTECTED]] > Enviado el: jueves, 17 de enero de 2002 0:26 > Para: Oscar Serrano; [EMAIL PROTECTED]; [EMAIL PROTECTED] > Asunto: Re: weird problem. Lost of the POST data > > > At 3:11 PM +0100 1/16/02, Oscar Serrano wrote: > >Here

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Paul Lindner
On Wed, Jan 16, 2002 at 06:56:37PM -0500, Vsevolod Ilyushchenko wrote: > > > > 3) Perl-based applications can just use the module and the common key > > to decrypt the contents of the cookie to find the authenticated > > username. If the cookie is not present redirect to the central > >

Re: weird problem. Lost of the POST data

2002-01-16 Thread Perrin Harkins
> Ummm yes... you know, I'm using the Template Toolkit. Try using the Perl stash instead of the XS stash, and see if your problem goes away. > It seems as if the > httpd child executes the processing of the template so fast that CGI.pm has > no time to get the POST data. I don't think so. It s

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Vsevolod Ilyushchenko
> > 3) Perl-based applications can just use the module and the common key > to decrypt the contents of the cookie to find the authenticated > username. If the cookie is not present redirect to the central > authentication page, passing in the URL to return to after > authenticat

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
> -Mensaje original- > De: Perrin Harkins [mailto:[EMAIL PROTECTED]] > Enviado el: jueves, 17 de enero de 2002 0:06 > Para: [EMAIL PROTECTED]; Oscar Serrano > Asunto: Re: weird problem. Lost of the POST data > > > > There is something that may give a clue. When I restart apache, it takes

RE: weird problem. Lost of the POST data

2002-01-16 Thread Oscar Serrano
> -Mensaje original- > De: Ged Haywood [mailto:[EMAIL PROTECTED]] > Enviado el: miercoles, 16 de enero de 2002 23:30 > Para: Oscar Serrano > CC: [EMAIL PROTECTED] > Asunto: Re: weird problem. Lost of the POST data Thank you Ged for your detailled information. I'm now debugging my scrip

Re: weird problem. Lost of the POST data

2002-01-16 Thread Robert Landrum
At 3:11 PM +0100 1/16/02, Oscar Serrano wrote: >Here I put the beggining of the file: > >#!/usr/bin/perl -w >use CGI; >use strict; >use varcomunes; #library of my own >use lib $LIBRERIAS_AT; >use EnlacesAT; #library of my own >use Idioma; #library of my own >use DBI; >use OrdenesComunes; #library

Re: Single login/sign-on for different web apps?

2002-01-16 Thread Steve Piner
Vsevolod Ilyushchenko wrote: > Yes, but I still should be able to propely handle people who go to any of > the protected sites first thing in the morning. I don't think I can get > away with only exit-point authentication that you propose. If the > entrance-point authentication works well, there