PDA

View Full Version : Forcing secure logins? Best way to do it?

jdavis@standard.k12.ca.us
29-06-05, 06:59 AM
What is the best way to force encrypted logins, ie https?

We use our ldap server for authentication, and I don't want to allow clear text logins under any circumstances.
pedroa
29-06-05, 07:28 AM
You can use dP via https.

Pedro A.
jdavis@standard.k12.ca.us
29-06-05, 09:20 AM
Thanks,

Yeah, I have that working... But the thing I'm unclear on is how to force an encrypted login. Expecting users to do it on their own is a guarantee it won't happen...
jdavis@standard.k12.ca.us
30-06-05, 07:54 AM
To be more specific, if a user attempts to login via http -vs- https, they would be forced to the https url. The rest of the site is not as critical. Just the login.
TheIdeaMan
08-07-05, 11:21 PM
Check this post: Ensure Entry through SSL (http://www.dotproject.net/vbulletin/showthread.php?t=2790)
jdavis@standard.k12.ca.us
12-07-05, 03:16 AM
Check this post: Ensure Entry through SSL (http://www.dotproject.net/vbulletin/showthread.php?t=2790)

Ok, but here's a real newb question: Where do I find the form action address?
jdavis@standard.k12.ca.us
12-07-05, 05:28 AM
Duh. Didn't read far enough.

Did the .htaccess thing. No workee. Common errors I should be looking for?
jdavis@standard.k12.ca.us
14-07-05, 07:44 AM
Duh. Didn't read far enough.

Did the .htaccess thing. No workee. Common errors I should be looking for?

Ok - added to httpd.conf instead - now it works. Just wish there was a way I could force only the login page to ssl.