Re: [twsocket] THttpServer Digest Auth implemented with ICS
The code forks from the basic auth code in the ConnectionDataAvailable event in the checker for "Authorization:" part. If you look at that code piece, it is easy to add new methods. You will need to define your Answer401NTLM() though as the precedence is now Digest and Basic (if you add NTLM to the end, it would never be executed as higher priority Basic is always supported.). Regards, SZ - Original Message - From: "Arno Garrels" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Monday, January 23, 2006 10:01 AM Subject: Re: [twsocket] THttpServer Digest Auth implemented with ICS > Fastream Technologies wrote: >> Hello Francois and Everybody, >> >> We (me and Peter Nikolow) worked on Digest authentication for ICS >> THttpServer. > > > Could this be implemented so that further authentication methods > can be added easily? > > Would it make sense to add NTLM support as well? > > With NTLM it would be possible to check logins either against Windows- > or a custom user database. Concerning Windows- users I'm not quite sure > if it makes much sence, because although it's possible to verify whether > a NTLM logon is accepted (SSPI), granted privileges and access rights > would apply only if you impersonate the logged on user (which is > impersonating current thread). > > Arno Garrels > > > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://www.elists.org/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] THttpServer Digest Auth implemented with ICS
Fastream Technologies wrote: > Hello Francois and Everybody, > > We (me and Peter Nikolow) worked on Digest authentication for ICS > THttpServer. Could this be implemented so that further authentication methods can be added easily? Would it make sense to add NTLM support as well? With NTLM it would be possible to check logins either against Windows- or a custom user database. Concerning Windows- users I'm not quite sure if it makes much sence, because although it's possible to verify whether a NTLM logon is accepted (SSPI), granted privileges and access rights would apply only if you impersonate the logged on user (which is impersonating current thread). Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] THttpServer Digest Auth implemented with ICS
You're welcome but there is a bug in the code that Peter needs to look at besides the ones I fixed. Please do not merge yet and wait for me. Best Regards, SZ - Original Message - From: "Francois PIETTE" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Friday, January 20, 2006 8:44 PM Subject: Re: [twsocket] THttpServer Digest Auth implemented with ICS > That's an interesting contribution ! > Thank you. > -- > [EMAIL PROTECTED] > http://www.overbyte.be > > - Original Message - > From: "Fastream Technologies" <[EMAIL PROTECTED]> > To: "ICS support mailing" > Sent: Friday, January 20, 2006 1:50 PM > Subject: [twsocket] THttpServer Digest Auth implemented with ICS > > >> Hello Francois and Everybody, >> >> We (me and Peter Nikolow) worked on Digest authentication for ICS >> THttpServer. We used Delphi and ICS v5 (unit version 1.38) for the >> httpsrv.pas and C++ for the test unit. We (fastream.com) want to donate >> the >> code to our very community. I urge you (Francois) to make this code part >> of >> your official release of both v5 and v6 and other people to have a look >> at >> the code and provide feedback so that we would be able to fix anything >> wrong. >> >> http://www.fastream.com/ics/THttpServerDigest.zip >> >> (The C++ code is less than 30 lines and it should not be hard to write it >> with Delphi as well). >> >> Best Regards, >> >> SubZero >> >> CSA, Fastream Technologies >> Software IQ: Innovation & Quality >> www.fastream.com | [EMAIL PROTECTED] >> >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://www.elists.org/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be > > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://www.elists.org/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] THttpServer Digest Auth implemented with ICS
That's an interesting contribution ! Thank you. -- [EMAIL PROTECTED] http://www.overbyte.be - Original Message - From: "Fastream Technologies" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Friday, January 20, 2006 1:50 PM Subject: [twsocket] THttpServer Digest Auth implemented with ICS > Hello Francois and Everybody, > > We (me and Peter Nikolow) worked on Digest authentication for ICS > THttpServer. We used Delphi and ICS v5 (unit version 1.38) for the > httpsrv.pas and C++ for the test unit. We (fastream.com) want to donate > the > code to our very community. I urge you (Francois) to make this code part > of > your official release of both v5 and v6 and other people to have a look at > the code and provide feedback so that we would be able to fix anything > wrong. > > http://www.fastream.com/ics/THttpServerDigest.zip > > (The C++ code is less than 30 lines and it should not be hard to write it > with Delphi as well). > > Best Regards, > > SubZero > > CSA, Fastream Technologies > Software IQ: Innovation & Quality > www.fastream.com | [EMAIL PROTECTED] > > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://www.elists.org/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
