• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

turn on SSL or session tracking

 
Brenda Kwok
Ranch Hand
Posts: 38
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hello,

I read the HF book, I don't know a point in P.647. After preparing the html form and DD for FORM authentication, how to turn on SSL or session tracking.

I want to know how to do the two methods.

Thank you.

Brenda
 
Brenda Kwok
Ranch Hand
Posts: 38
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I am beginner to take this exam. Can anyone answer my question pls.

Thanks.
 
Bert Bates
author
Sheriff
Posts: 8900
5
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hey Brenda,

Ok, you've got Form-based authentication discussed on page 647, and you've got data confidentiality / integrity discussed on page 652. If you compare them, you'll see that they work independently of one another

To get them to work together, check out pages 653-655!

Good luck on the exam, let us know how you do! And... if it seems that you need more time to study, postpone the exam!

- Bert
 
Brenda Kwok
Ranch Hand
Posts: 38
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I got this error "Invalid direct reference to form login page" when i typed correct username and password.


Do we need to install real cert for the FORM-based authentication and CONFIDENTAIL option in <transport-guarantee> ?

:roll:
 
Giju George
Ranch Hand
Posts: 333
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
If you look at the figure in page 655 of HFS, it says that if the <user-data-constraint> is configured in the DD, then the server informs the client to come on a secure protocol ie https. So I think you need to have digital certificate installed on the server to get this working.
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic