Re: Apache, Oracle, Cookies and User Authentication

Martin,

We have a web application and we use cookies for the user authentication. We have an OpenVMS ALpha as database (Oracle) server and a Sun Solaris machine a web-server. Our cgi's are developed in Perl DBD:DBI and for authentication we use the Oracle usercode/password combination. To prevent that our users will use other client applications they only know one part of the password. A login-cgi provides the other part. Passwords, usercodes are saved as temporary cookies. Password are encrypted! In Perl it's not difficult to read a cookie. I don't know if this can be used in report apps. If you want to know more let me know.

kind regards,

Martin Hepworth wrote:

> stephenreynolds_at_hotmail.com wrote:
> >
> > We are building a development web site on an NT machine using Apache,
> > Oracle Reports Server and an Oracle database. When completed, the web
> > site will be moved onto a unix server.
> >
> > We are using Apache user authentication, using the the same username
> > and passwords as the Oracle database uses. The Oracle username is the
> > mechanism that sets the level of access users have to the database.
> >
> > We would like to be able to capture the Apache username as a user logs
> > in, and pass that username as a string into the URL that runs a report
> > definition file in the Oracle Reports Server.
> >
> > I think we should be using cookies and JavaScript but we don't know how
> > to go about it. Does anybody know how we can do this? Alternatives to
> > the cookie/JavaScript option will be gratefully received.
> >
> > I have included a typical URL below, showing where we need to insert
> > the Apache username:
> >
> > <a_href="http://SAMIS_1/cgi-bin/r30cgi32.exe?
> > blams_521pUser=OPS$APACHE_USERNAMS_GOES_HERE">Run Report</a>
> >
> > Regards Steve
> >
> > Sent via Deja.com http://www.deja.com/
> > Share what you know. Learn what you don't.
>
> Steve
> IMHO I'd use Linux instead of NT on the Server, then when you move any
> CGI scripts (easiest way to do this) you'll have less of a port to do.
> Doing cross platform development is tricky for various Unix's never mind
> NT - Unix..
>
> Martin
Received on Wed Jun 09 1999 - 06:17:44 CDT