?
Solved

Multiple authentication prompts over web

Posted on 2006-07-21
10
Medium Priority
?
196 Views
Last Modified: 2013-12-18
Hi Experts:

Can you shed some light on this for me? I have a small web application (basically just a form) that users can access through the browser, fill in information and save again (nothing fancy, I know).

For security:

- I have created a role called [NonAnon] and added a readers and authors field to the form, each containing that role.

- Because this is a public app, I am using what we call a lightweight account in the address book (a person document, but no certificate -- authentication only on a password string).

- I've listed this account in the ACL and assigned it the [NonAnon] role, with Editor access.

- The form itself allows authors and above to create and read documents.

- Anonymous access in the ACL is set to None.

It all works fine (i.e. prompts to authenticate on accessing the document through the web). And the document goes into edit mode fine when the edit button is clicked. But when the save button is clicked, the document prompts to authenticate again, and then saves. Subsequent changes to the document do not require any reauthentication.

So basically each session requires two bouts of authentication -- one when first accessing the document, and one when first saving.

I would like only one authentication prompt when the user first accesses, though, with all saves not requiring reauthentication.

Any thoughts?

-Ke
0
Comment
Question by:kkiddie
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
10 Comments
 
LVL 46

Expert Comment

by:Sjef Bosman
ID: 17155953
Do you have logging enabled, e.g. domlog.nsf? Check whether in both cases the same URL was used, e.g. using
    http: //www.domain.com/filename.nsf/view/doc?OpenDocument
and
    http: //11.22.33.44/filename.nsf/view/doc?OpenDocument
might refer to the save server, but AFAIK the server considers it to come from a new user and will therefore require a new login.
   
0
 

Author Comment

by:kkiddie
ID: 17156226
They are logging with domlog.nsf, but for some reason today's traffic doesn't seem to be posted yet... I'll keep checking.

It's an good idea, but I don't think the URL is at issue.

I can tell you that the URL when accessing, (e.g. http: //www.domain.com/filename.nsf/view/doc?OpenDocument) is the same domain when the document goes into edit mode (e.g. http: //www.domain.com/filename.nsf/view/doc?EditDocument), and that the form method POST URL generated by Notes is a relative path and so should just be grabbing the domain from the address bar...
0
 
LVL 46

Expert Comment

by:Sjef Bosman
ID: 17157515
Ah, no, not always true. There are some Domino-generated URLs that are just plain wrong, despite the good intentions, although things have improved enormously since 4.6. If you use URLs yourself, they'll be correct, no doubt. Some URLs though, generated by agents and $$Return things could go terribly wrong. I hope that's corrected by now, but I can't tell because we used to generate ALL those URL's using one function, just to avoid URL changes.

Today's traffic? Try a view refresh with F9. Traffic should be in that database immediately. What Notes/Domino releases are you on?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 46

Accepted Solution

by:
Sjef Bosman earned 500 total points
ID: 17157528
Some links that might come in handy:
    http:Q_20339652.html "Double Login to web application"
    http:Q_20397274.html "Double-authentication on web"
    http:Q_20380934.html "Help Required - Asking authentication twice in same application"
0
 
LVL 63

Assisted Solution

by:Zvonko
Zvonko earned 500 total points
ID: 17159421
Hello Ke,
isn't on the Form in Designer a property to default open the Document in Edit mode? Use that and you have solved two problems at once: no Button for Edit mode needed and only one authentication (for Edit) needed.

0
 
LVL 46

Expert Comment

by:Sjef Bosman
ID: 17159442
That's cheating!! ;-)
0
 
LVL 63

Expert Comment

by:Zvonko
ID: 17159477
Sorry, what? I do not get you? Or do you mean Zvonko reads what zvonko has written? There can be only One! :)
0
 
LVL 46

Expert Comment

by:Sjef Bosman
ID: 17159531
No, I meant putting the document in Edit mode is cheating. It doesn't solve the problem, it's just a bypass.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You’ve got a lotus Domino web server, and you have been told that “leverage browser caching” is a must do. This means that we have to tell the browser everywhere in the web to use cache. In other words, we set (and send) an expiration date in the HT…
  In today’s Arena we can’t imagine our lives without Internet as we are highly used to of it. If we consider our life style just for only 2 min we found that face to face communication is swapped by e-communication.  Every Where from Works place to…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question