What is "My quotes"?
User Authentication Methods
Hello Guest
  
  • Login
• Register…
• Start blog
  • Who, Where, When
• What can I do?
• What to Read?
  • Polls
• Avatars
• Interests
  • Cities and Countries
• Random blog
• Users search
  • Search
• Games
• Tests
• QAIX
  • Сообщества
• Talxy Chat
• Horoscope
• Online
 
Зарегистрируйся!

QAIX > ColdFusion > User Authentication Methods 12 February 2005 01:12:22

  Recent blog posts: 
  They have birthday today: 
  Forums:   
  Discuss: 
  Recent forum topics: 
  Recent forum comments:
  Moderators:

User Authentication Methods

Graham Pearson 12 February 2005 01:12:22
 I am looking for resources on other user authentication methods for
Coldfusion Applications. Besides having the standard username/password
what other methods can be used within a Coldfusion Application.

With this one application I need to know that the user who entered the
username/password is actually the person and not someone who has
hijacked the account. Any Ideas or resources.

--
-------------------­--------------------­--------------------­-------------


~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoff­usion.com/banners/vi­ew.cfm?bannerid=67

Message: http://www.houseoff­usion.com/lists.cfm/­link=i:4:194332
Archives: http://www.houseoff­usion.com/cf_lists/t­hreads.cfm/4
Subscription: http://www.houseoff­usion.com/lists.cfm/­link=s:4
Unsubscribe: http://www.houseoff­usion.com/cf_lists/u­nsubscribe.cfm?user=­13123.11886.4
Donations & Support: http://www.houseoff­usion.com/tiny.cfm/5­4

Add comment
Dave Watts 12 February 2005 00:38:17 permanent link ]
 
I am looking for resources on other user authentication > methods for Coldfusion Applications. Besides having the > standard username/password what other methods can be used > within a Coldfusion Application.>
With this one application I need to know that the user who > entered the username/password is actually the person and not > someone who has hijacked the account. Any Ideas or resources.

This isn't really something that would be specific to CF applications.
Instead, what you're looking for are ways you can perform web server
authentication, such as using client certificates or hardware tokens in
conjunction with SSL.

http://www.microsof­t.com/resources/docu­mentation/WindowsSer­v/2003/standard/p
roddocs/en-us/Defau­lt.asp?url=/resource­s/documentation/wind­owsserv/2003/stan
dard/proddocs/en-us­/sec_auth_certauth.a­sp (this is all one URL!)

http://www.windowsi­tpro.com/Windows/Art­icle/ArticleID/20807­/20807.html

http://www.rsasecur­ity.com/node.asp?id=­1156 (RSA SecurID has been around a
while, there are better hardware solutions, but I had this link handy)

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.­com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.fig­leaf.com/ for more information!


~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoff­usion.com/banners/vi­ew.cfm?bannerid=49

Message: http://www.houseoff­usion.com/lists.cfm/­link=i:4:194346
Archives: http://www.houseoff­usion.com/cf_lists/t­hreads.cfm/4
Subscription: http://www.houseoff­usion.com/lists.cfm/­link=s:4
Unsubscribe: http://www.houseoff­usion.com/cf_lists/u­nsubscribe.cfm?user=­13123.11886.4
Donations & Support: http://www.houseoff­usion.com/tiny.cfm/5­4

Add comment
Howie Hamlin 12 February 2005 00:40:11 permanent link ]
 If you're using IIS then you might want to look at iAuth.

http://www.coolfusi­on.com/products/iAut­h/

iAuth is an ISAPI filter DLL for IIS that allows you to do complete authentication using CFML. You can code up any type of authentication scheme to suit your needs including control over simultaneous access using the same login.

Regards,

--
Howie Hamlin - inFusion Project Manager
On-Line Data Solutions, Inc. - www.CoolFusion.com
inFusion Mail Server (iMS) - The Award-winning, Intelligent Mail Server
PrismAV - Virus scanning for ColdFusion applications>>> Find out how iMS Stacks up to the competition: http://www.coolfusi­on.com/imssecomparis­on.cfm


--- On Friday, February 11, 2005 3:28 PM, Graham Pearson scribed: --->
I am looking for resources on other user authentication methods for> Coldfusion Applications. Besides having the standard username/password> what other methods can be used within a Coldfusion Application.>
With this one application I need to know that the user who entered the> username/password is actually the person and not someone who has> hijacked the account. Any Ideas or resources.

~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoff­usion.com/banners/vi­ew.cfm?bannerid=49

Message: http://www.houseoff­usion.com/lists.cfm/­link=i:4:194350
Archives: http://www.houseoff­usion.com/cf_lists/t­hreads.cfm/4
Subscription: http://www.houseoff­usion.com/lists.cfm/­link=s:4
Unsubscribe: http://www.houseoff­usion.com/cf_lists/u­nsubscribe.cfm?user=­13123.11886.4
Donations & Support: http://www.houseoff­usion.com/tiny.cfm/5­4

Add comment
Michael Dawson 12 February 2005 00:48:35 permanent link ]
 Other than biometric devices, there is not much you can definitely count
on. Even that, who is to say that someone kills me, and lays my finger
on the scanner?

You might try a SecureID device. With that system, you have to "know
something" and "have something". If I know your password, it does no
good because I don't have the SecureID number generator.

I'm not sure how that would hook in with ColdFusion. They may have some
sort of API to pass through.

-----Original Message-----
From: Graham Pearson [mailto:gpearson-zj5r4TofhjsxpjhG4MkHKw@public.gmane.org]
Sent: Friday, February 11, 2005 2:29 PM
To: CF-Talk
Subject: User Authentication Methods

I am looking for resources on other user authentication methods for
Coldfusion Applications. Besides having the standard username/password
what other methods can be used within a Coldfusion Application.

With this one application I need to know that the user who entered the
username/password is actually the person and not someone who has
hijacked the account. Any Ideas or resources.

~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoff­usion.com/banners/vi­ew.cfm?bannerid=67

Message: http://www.houseoff­usion.com/lists.cfm/­link=i:4:194355
Archives: http://www.houseoff­usion.com/cf_lists/t­hreads.cfm/4
Subscription: http://www.houseoff­usion.com/lists.cfm/­link=s:4
Unsubscribe: http://www.houseoff­usion.com/cf_lists/u­nsubscribe.cfm?user=­13123.11886.4
Donations & Support: http://www.houseoff­usion.com/tiny.cfm/5­4

Add comment
George Abraham 12 February 2005 01:12:22 permanent link ]
 If you are interested in further scoping your authentication to
distributed authentication and federated authentication, then check
out Shibboleth. It is a middleware application developed by Internet2.
Since I am in a University environment and I have to support
collaboration between partners in different Univs, Shibboleth helps. I
don't have to keep track of usernames and passwords for those in other
Univs then.

http://shibboleth.i­nternet2.edu/

George

~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~~~~~~~~~~~­~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoff­usion.com/banners/vi­ew.cfm?bannerid=67

Message: http://www.houseoff­usion.com/lists.cfm/­link=i:4:194365
Archives: http://www.houseoff­usion.com/cf_lists/t­hreads.cfm/4
Subscription: http://www.houseoff­usion.com/lists.cfm/­link=s:4
Unsubscribe: http://www.houseoff­usion.com/cf_lists/u­nsubscribe.cfm?user=­13123.11886.4
Donations & Support: http://www.houseoff­usion.com/tiny.cfm/5­4

Add comment
 

Add new comment

As:
Login:  Password:  
 
 
  
 
Пожалуйста, относитесь к собеседникам уважительно, не используйте нецензурные слова, не злоупотребляйте заглавными буквами, не публикуйте рекламу и объявления о купле/продаже, а также материалы нарушающие сетевой этикет или УК РФ.


QAIX > ColdFusion > User Authentication Methods 12 February 2005 01:12:22

see also:
OIDS
ALTER TABLE vs. CREATE TABLE
Avoid MVCC using exclusive lock…
пройди тесты:
see also:
:-D Hey, I've got a pretty lot of...
13 Must Have Firefox Extensions for Web…
October 31 All Life On Earth Will Die

  Copyright © 2001—2008 QAIX
Idea: Miсhael Monashev
Помощь и задать вопросы можно в сообществе support.qaix.com.
Сообщения об ошибках оставляем в сообществе bugs.qaix.com.
Предложения и комментарии пишем в сообществе suggest.qaix.com.
Информация для родителей.
Write us at:
If you would like to report an abuse of our service, such as a spam message, please .