You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-user@jakarta.apache.org by Jean-Philippe Encausse <Je...@Jalios.com> on 2005/04/14 11:15:50 UTC
microsoft webfolder + authentication
Hi,
My Windows Explorer Web folder always remember login/password
how can I logout user or timeout login ?
For application server portability I remove Slide security an set a
Servlet Filter
doing BASIC Authentication. That's work fine !
--
*Jean-Philippe Encausse* - R&D Jalios SA
Jp@encausse.net - http://www.encausse.com - http://www.jalias.com
ICQ: 109796741 - AOL: NextOne6666 - MSN: Nextone6666@hotmail.com
Mob: +33 6 80 75 71 09 - Office: +33 1 39 23 92 83 - Home: +33 1 39 18 90 15
*Do it Once, Use it Twice ~ Do it Twice, Make It Once*
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.9.7 - Release Date: 12/04/2005
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: microsoft webfolder + authentication
Posted by Martin Kalén <mk...@apache.org>.
Jean-Philippe Encausse wrote:
> And i don't understand why this #&$# of Windows XP remember my
> login/password.
I think they consider it a feature. :-)
> I was thinking of a timeout server side problem but event if I kill the
> webserver, the web link ... Widows remember the password. It's so
> strange that I was thinking someone already get the same issue ?
I did a quick google about this and it seems you have the choice:
[ ] Save this password to your password list
the _first_ time you logon.
Go to your network places, delete the WebDAV connection, and create it
again (if you are using HTTPS do _not_ enter ":443" as port, just https
as protocol, this was another well known quirk).
The first time you logon again after re-creating the network place
the password box should popup again, now with the choice to uncheck
"Save this password to your password list".
HTH,
Martin
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: microsoft webfolder + authentication
Posted by Jean-Philippe Encausse <Je...@Jalios.com>.
Well in fact,
I test my slide store implementation under Web Folders because it is
more simple for me and because 80% of our users will use web folders.
And i don't understand why this #&$# of Windows XP remember my
login/password.
I was thinking of a timeout server side problem but event if I kill the
webserver, the web link ... Widows remember the password. It's so
strange that I was thinking someone already get the same issue ?
regards,
Jp
Martin Kalén a écrit :
> Jean-Philippe Encausse wrote:
>
>> On client side:
>> -> Login as a new login/pass in a web folder windows remember my login
>> pass and so always
>> resend it without asking me
>>
>> With a browser it's working very well but with WebFolder I don't know
>> how to explitly logout do not save login/password.
>
>
> OK, then I see this a 100% Microsoft-specific issue and (personally) do
> not think that Slide server-side can help you control the behaviour.
>
> Maybe you can try some MS usergroups for info re. registry tweaks or
> administrative settings to prevent WebFolders from persistent storage
> of username/password?
>
> Regards,
> Martin
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
--
*Jean-Philippe Encausse* - R&D Jalios SA
Jp@encausse.net - http://www.encausse.com - http://www.jalias.com
ICQ: 109796741 - AOL: NextOne6666 - MSN: Nextone6666@hotmail.com
Mob: +33 6 80 75 71 09 - Office: +33 1 39 23 92 83 - Home: +33 1 39 18 90 15
*Do it Once, Use it Twice ~ Do it Twice, Make It Once*
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.9.7 - Release Date: 12/04/2005
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: microsoft webfolder + authentication
Posted by Martin Kalén <mk...@apache.org>.
Jean-Philippe Encausse wrote:
> On client side:
> -> Login as a new login/pass in a web folder windows remember my login
> pass and so always
> resend it without asking me
>
> With a browser it's working very well but with WebFolder I don't know
> how to explitly logout do not save login/password.
OK, then I see this a 100% Microsoft-specific issue and (personally) do
not think that Slide server-side can help you control the behaviour.
Maybe you can try some MS usergroups for info re. registry tweaks or
administrative settings to prevent WebFolders from persistent storage
of username/password?
Regards,
Martin
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: microsoft webfolder + authentication
Posted by Jean-Philippe Encausse <Je...@Jalios.com>.
Thanks for your answer, in fact my main problem is:
On client side:
-> Login as a new login/pass in a web folder windows remember my login
pass and so always
resend it without asking me
With a browser it's working very well but with WebFolder I don't know
how to explitly logout do not save login/password.
Regards,
Jp
Martin Kalén a écrit :
> Jean-Philippe Encausse wrote:
>
>> My Windows Explorer Web folder always remember login/password
>> how can I logout user or timeout login ?
>>
>> For application server portability I remove Slide security an set a
>> Servlet Filter
>> doing BASIC Authentication. That's work fine !
>
>
> To expire inactive HTTP logins you use the session-timeout value
> of the web.xml Servlet descriptor (specified in minutes).
>
> XPath for session-timeout is /web-app/session-config/session-timeout
>
>
>
> To actively terminate a HTTP session (including authentication)
> from Java you use the HttpSession class from Servlet API and call:
> servletSession.invalidate();
>
> In Slide this is done in AbstractWebdavMethod on SlideException
> with status code WebdavStatus.SC_UNAUTHORIZED.
>
> (In the current code I didn't find a way of programatically
> terminating the session other than on this exception handling spot.)
>
>
>
> As for making MS Windows webfolder forget a filled in name/password
> until next logon try, I think you are out of luck trying to control
> this through Slide.
>
> Regards,
> Martin
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
--
*Jean-Philippe Encausse* - R&D Jalios SA
Jp@encausse.net - http://www.encausse.com - http://www.jalias.com
ICQ: 109796741 - AOL: NextOne6666 - MSN: Nextone6666@hotmail.com
Mob: +33 6 80 75 71 09 - Office: +33 1 39 23 92 83 - Home: +33 1 39 18 90 15
*Do it Once, Use it Twice ~ Do it Twice, Make It Once*
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.9.7 - Release Date: 12/04/2005
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: microsoft webfolder + authentication
Posted by Martin Kalén <mk...@apache.org>.
Jean-Philippe Encausse wrote:
> My Windows Explorer Web folder always remember login/password
> how can I logout user or timeout login ?
>
> For application server portability I remove Slide security an set a
> Servlet Filter
> doing BASIC Authentication. That's work fine !
To expire inactive HTTP logins you use the session-timeout value
of the web.xml Servlet descriptor (specified in minutes).
XPath for session-timeout is /web-app/session-config/session-timeout
To actively terminate a HTTP session (including authentication)
from Java you use the HttpSession class from Servlet API and call:
servletSession.invalidate();
In Slide this is done in AbstractWebdavMethod on SlideException
with status code WebdavStatus.SC_UNAUTHORIZED.
(In the current code I didn't find a way of programatically
terminating the session other than on this exception handling spot.)
As for making MS Windows webfolder forget a filled in name/password
until next logon try, I think you are out of luck trying to control
this through Slide.
Regards,
Martin
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org