Well i am doing a authentication and authorization server for the DCA(distributed component architecture) package.. and i've got no clue about it.. basically, its a single sign on for more than one services right.. the user can use ftp services, sql server services etc. but what i dont get is, how will i prevent a user from accessing an sql server of ftp if he is not authenticated. as in how will i prevent windows from allowing it to connect to the ftp server. the request must go thru my application. is there any way
u could let me know how is it possible?? would be really happy if you could help me out..?

well... i thought if i was on the right path and i was on a complete mess....

Then after few hours i was attaining a solution... which came up like this when i wrote it down...

Ok... a few doubts here. Correct me if i am going wrong somewhere.

Like you have an access system wherein the user has to sign on. I was right here.
Once the user gets into your system there you will have various services. Yes i will have.

If that is the case here is what i have to do...

Provide authorization for a user say XYZ for all the services and in your system provide an authentication mechanism so that if the credentials are right you will have the original user as alias and actually use XYZ for using the services. You will have to look into alternatives as to how various sessions has to be seperated as it is possible that more than one user will be using your server.

But i still have few more doubts when it comes to implementation.... So if there are any of you guys who know how an authentication and authorization server has to be built do shed some light on that and i will greatly appreciate that.

Thanks in advance
Let me know.


 

 

 


Reply