Page 1 of 1
Basic Authentication
Posted: Wed Apr 29, 2009 1:59 pm
by martinG
Hello,
I'm running a site which uses Basic authentication to reach some internal pages.
The usernames and passwords are since long time distributed to all users.
Now I'm rebuilding the internal part of the site to be using the CMSMS. But I want to keep the Basic auth for login. After the user has logged in, he is presented the new CMS.
Now the problem, I want to implement an Internal Forum within the CMS.
But I don't want the users having to login once more (by using FrontEndUsers).
Is it possible to use a Forum within the CMSMS but to use the already logged in userid:s?
/ MartinG
Re: Basic Authentication
Posted: Wed Apr 29, 2009 2:08 pm
by Nullig
Why not use CMSMS Frontendusers as the main login? Then you could use it for both.
Do you store your original usernames and passwords in a db? Depending on how you create/store the pwd data, you may be able to copy the db info into CMSMS using phpMyAdmin, or another similar db utility.
Nullig
Re: Basic Authentication
Posted: Wed Apr 29, 2009 2:15 pm
by martinG
I realize that that's one option. But I don't want the CMS to be visible to the outside world.
The server is using basic authentication with an auth user file.
Re: Basic Authentication
Posted: Wed Apr 29, 2009 2:18 pm
by Nullig
I don't think you're going to be able to do this without a double login.
Nullig
Re: Basic Authentication
Posted: Wed Apr 29, 2009 2:36 pm
by tyman00
Why not just make your landing page a basic HTML page that has only the FEU login. That would reduce the need for double login. It wouldn't be any less secure than the basic authentication, plus a nicely styled Form would look a lot better than the pop-up authentication window.
Re: Basic Authentication
Posted: Wed Apr 29, 2009 7:53 pm
by martinG
Yes, I see what you mean. Just wanted to know if it is possible in some simple way.
Thanks for replying / MartinG
Re: Basic Authentication
Posted: Thu Apr 30, 2009 5:26 am
by Jeff
As long as the Basic Authentication (ie .htaccess) is on/in the directory that CMSMS is installed in then you won't be able to access any pages until you are logged in and you don't need FEU.
Jeff
Re: Basic Authentication
Posted: Thu Apr 30, 2009 7:00 am
by martinG
I was just thinking if the Authorization header from the client could be used to extract the user name to the front end user module.
Thank you all for the replies and this is a great moment to stop picking your nose. Hope you all will be allright.
/ MartinG