MS 'Active Directory' ...

[Jörg Knebel-2]

... or what ever its called

Hi,

I've been asked if it would be possible to integrate that MS scheme into an 4D application.


Details:

I'm in the middle of re-develop an application in v12 that will run in C/S in a MS-Win-enviornment in the end.

The idea is to get the log-in information of an user working in an 'active directory' to allow the access to a 4D app by using the same log-in-name and password for 4D.
The 4D build in user / password is NOT used in the new 4D app.

Any ideas?

Thanks.

Regards
Jörg Knebel - 4D Developer since 1991
TTT Data Systems Pty Ltd
Phone: [phone]
www.tttdatasystems.com.au



**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Lutz Epperlein-2]

Am 19.11.2010 14:37, schrieb Jörg Knebel:
> The idea is to get the log-in information of an user working in an
> 'active directory' to allow the access to a 4D app by using the same
> log-in-name and password for 4D.

That's called Single Sign On. There is an old Tech Note:
http://kb.4d.com/search/assetid=41346

HTH
Lutz


--
Lutz Epperlein
Intranetz - Gesellschaft für Informationslogistik mbH
Bergstr. 22, 10115 Berlin

**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[David Dancy]

Use PHP. There's a good tech note about it.

HTH

David Dancy
Sydney, Australia



On 20 November 2010 00:37, Jörg Knebel <[hidden email]> wrote:

> ... or what ever its called
>
> Hi,
>
> I've been asked if it would be possible to integrate that MS scheme into an 4D application.
>
>
> Details:
>
> I'm in the middle of re-develop an application in v12 that will run in C/S in a MS-Win-enviornment in the end.
>
> The idea is to get the log-in information of an user working in an 'active directory' to allow the access to a 4D app by using the same log-in-name and password for 4D.
> The 4D build in user / password is NOT used in the new 4D app.
>
> Any ideas?
>
> Thanks.
>
> Regards
> Jörg Knebel - 4D Developer since 1991
> TTT Data Systems Pty Ltd
> Phone: [phone]
> www.tttdatasystems.com.au

**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Thomas Swenson]

Sample method for how I did it with LDAP4D

http://www.adogandhisboy.com/manual/Sample.html#LDAPu_GetActiveDirectoryUsers

On Nov 19, 2010, at 8:37 AM, Jörg Knebel wrote:

> ... or what ever its called
>
> Hi,
>
> I've been asked if it would be possible to integrate that MS scheme into an 4D application.
>
>
> Details:
>
> I'm in the middle of re-develop an application in v12 that will run in C/S in a MS-Win-enviornment in the end.
>
> The idea is to get the log-in information of an user working in an 'active directory' to allow the access to a 4D app by using the same log-in-name and password for 4D.
> The 4D build in user / password is NOT used in the new 4D app.
>
> Any ideas?
>
> Thanks.
>
> Regards
> Jörg Knebel - 4D Developer since 1991
> TTT Data Systems Pty Ltd
> Phone: [phone]
> www.tttdatasystems.com.au
>
>

**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[jkain_2000]

We use Rob Laveaux's free LDAP plug-in. It allows authentication with an
LDAP or ActiveDirectory server.

With v12, as David mentioned, you can use PHP, and have access to more of
the services provided by an LDAP server. If all you need is to authenticate,
Rob's freebie is perfect.

Jeff

On 11/19/10 8:37 AM, "Jörg Knebel" <[hidden email]> wrote:

> ... or what ever its called

**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Jesse Pina]

Hi Jörg,

Here is the 4D v12 Tech Note that was mentioned earlier, which uses PHP.

        http://kb.4d.com/search/assetid=76124 (current partner only)

I would check out the first example in the Tech Note, which shows how to authenticate on an LDAP directory.

Kind regards,

--
Jesse Piña
Technical Services Team Member
4D, Inc.
====================================================================
The holidays are coming! Get a $600 shopping spree for you or your loved ones!
http://www.4d.com/gift-card.html
====================================================================
**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Jörg Knebel-2]

Hi,

Thanks to everyone for the help.

Cheers
Jörg



Regards
Jörg Knebel - 4D Developer since 1991
TTT Data Systems Pty Ltd
Phone: [phone]
www.tttdatasystems.com.au



**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Owen Watson-2]

One low security way to do it is to use LEP to call
set username
and
set userdomain
and setting the 4D username from that.
You can increase security by checking for IP address, MAC address, etc etc
**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************

[Tom Benedict]

J?rg Knebel writes:

>I've been asked if it would be possible to integrate that MS scheme into an 4D application.

>The idea is to get the log-in information of an user working in an 'active directory' to allow
>the access to a 4D app by using the same log-in-name and password for 4D.
>The 4D build in user / password is NOT used in the new 4D app.

Thomas Maul wrote a tech note a few years ago http://kb.4d.com/search/assetid=41346 describing how to do this with native 4D code and some simple Windows Script Host code. The goal was to provide single sign on Windows Authentication for 4D. Basically, you create your security groups in Active Directory the get those groups at startup and verify that the user is in similar groups in 4D.

So it actually uses the 4D Users & Groups system but only via code and completely transparent to users and administrators.

We're considering implementing it.

I don't know anything about Rob Laveaux's LDAP plugin. It may do something similar. PHP would be a good option under v12.

HTH,

Tom Benedict
Free & Clear, Inc





**********************************************************************
The holidays are coming!  Get a $600 shopping spree
for you or your loved ones!
http://www.4d.com/gift-card.html


4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[hidden email]
**********************************************************************