|
|
| Re: How to authenticate users using mod_plsql? [message #311220 is a reply to message #311094] |
Thu, 03 April 2008 14:31   |
andrew again
Messages: 2577
Registered: March 2000
|
Senior Member |
|
|
The pop up you refer to sounds like a property of the DAD. Verify from the DAD admin page or in the ...Apache/modplsql/conf/dads.conf (if that's the file for 9.0.3).
You can preset the passwd on the DAD, and then when any call comes in to the database, you verify that the user's been authenticated before allowing them to proceed. Check the docs for the easiest way to do this. I had something like this:
Schema A and B. A owns schema objects & packages. Some packages are just security wrappers. These packages are executable by schema B. Schema B is the one you use in the DAD.
Security wrapper retrieves cookie from users browsers to see if they're logged in. If not, redirect to login page. Once authenticated, set cookie in user's browser to expire after say 30 min. After each successful transaction, refresh the cookie to 30 min again.
Cookies work fine as long as you don't jump around across hosts (a cookie can only be retrieved by the domain that set it type of idea...)
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
