authentication filter in Share

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

alf_kin

Hi all,

I'm developing a authentication filter to chain with the existing filters in order to deny access for specific IP Address. When the user attempts to authenticate I want to retrieve the data entered in the login form and, basing on an external properties file, check the IP allowed for that user. I do not know where (session, httprequest…) and how to retrieve the username and password user entered!

any hint????

regards all.

michaelböckling

Do you want to whitelist only certain IPs, or do you have to check for username/IP combination? Because doing it in the firewall would be a lot easier in that case.

If you really want to hack the authentication subsystem, things can get complicated. Are you using the alfrescoNtlm authenticator? Implementing a new subsys from scratch is not easy, if you plan to cover HTTP, CIFS, WebDAV, Sharepoint etc.
Your fastest option in that case is probably to modify one of the existing authenticators or wrap them (delegate pattern).

Cheers,
Michael