• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Tim Cooke
  • Liutauras Vilda
  • Jeanne Boyarsky
  • paul wheaton
Sheriffs:
  • Ron McLeod
  • Devaka Cooray
  • Henry Wong
Saloon Keepers:
  • Tim Holloway
  • Stephan van Hulst
  • Carey Brown
  • Tim Moores
  • Mikalai Zaikin
Bartenders:
  • Frits Walraven

Applet and LDAP Problem

 
Greenhorn
Posts: 20
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hiya, Im working on a site that requires a user to authenticate to LDAP and presenting an applet as the login box. Problem is, cos of the applet sandbox problem (i think), I cant get the applet to talk to the LDAP server, even though theyre on the same domain.
ie, my applet comes from;
thiscomputer.myserver.com
and the ldap server is
ldap.myserver.com
how do people do this normally??? Obviously altering the security properties of everyones JRE is out the question. What do people normally do - must I use forms and servlets instead??
Thanks for you help
mike
 
Saloon Keeper
Posts: 28319
210
Android Eclipse IDE Tomcat Server Redhat Java Linux
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
As you've discovered, Java encourages the 3-tier approach. It's a pain, since you have to do more design and programming work, but is actual a more robust way of doing things on an enterprise scale.
Besides, if the purpose is top authenticate to a web site, it's better if security is built into the site itself. Clients can be hacked MUCH more easily. The the site is a Java webapp, consider using JAAS. That way the security is builtin. You should be able to have JAAS use LDAP as the authenticator and role definer.
 
Mike Br
Greenhorn
Posts: 20
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Thanks Tim I'll have a look at that
mike
 
I like you because you always keep good, crunchy cereal in your pantry. This tiny ad agrees:
Gift giving made easy with the permaculture playing cards
https://coderanch.com/t/777758/Gift-giving-easy-permaculture-playing
reply
    Bookmark Topic Watch Topic
  • New Topic