Re: Http authentication using BasicSecurityFilter

I see now what you are talking about.
You are surprised that the account used to communicate to xplanner is
not a system "trusted" account used between 2 systems in the same
trust region. Is that it?
There isn't anything that prevent you from creating system account for
doing this. In the end, this model ensures that client programs don't
have to enforce security policy checks.
If they are interactive like an enhanced clients (IDE plugin,
dashboad...) they should query the user credentials. If they are
batched, create a system account with sysadmin priviledge (I realize
that there should be a role with global readership but no authorship)
to access all projects.

Jacques

On 8/24/07, Helen <[email protected]> wrote:
>
>  Hi Jacques.  Thanks for your reply.
>
>  I was talking about credentials configured for a server set up to do http
> authentication.  So these would be username/password necessary to just get
> to the server itself before being able to even communicate with XPlanner.  I
> am not sure how else to do it, other than configuring additional settings
> for xplanner username/password somehow.   It just looked confusing to me to
> be able to do this from a browser with different sets of credentials, and
> using the SOAP API only having them be the same.
>
>  Thanks
>  -Helen
>
>
>  Jacques Morel wrote:
>  I haven't had the time to research this deeply so I am answering with
> the best of my memory.
> I am not sure what you are refering with http credentials. If they are
> the userid and password used to connection through SOAP, they have to
> match a user id in xplanner database. How do you suggest the mapping
> be done if it wasn't like that?
> Something tells me I did not understand your question ;-)
>
> Jacques
>
> On 8/17/07, Helen <[email protected]> wrote:
>
>
>  Hi. I am trying to connect to XPlanner (.7b7) using the SOAP API, and
> everything works fine until I try to use Http Authentication. It actually
> works if the http username/password are the same as the XPlanner user
> name/password, but if these are different, the user is not found. I traced
> it to the BasicSecurityFilter implementation, which uses the http
> credentials to search for and XPlanner Person -- if these are different, it
> obviously doesn't work, since the Person is not found. Is it the design to
> have the http authentication credentials be the same as the XPlanner
> credentials?
>
> BTW, When connecting through a browser, the FormSecurityFilter takes effect
> on the server side, which does allow the http authentication credentials to
> be different from the XPlanner credentials.
>
> Could anyone help me figure out if I am not setting something up correctly,
> or if this is the design of the http authentication implementation for SOAP
> in XPlanner?
>
> Thanks a lot
> -Helen
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Xplanner-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/xplanner-devel
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Xplanner-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/xplanner-devel
>
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Xplanner-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/xplanner-devel
>
>

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/