Re: Set AuthName to prompt for sequential passwords

2010-12-28 Thread David Nicol
> Matt Puumala wrote: >> >> Greetings! >> >> I am trying to make a two-factor authentication module, built on >> AuthType Basic. (google for Perfect Paper Passwords for the scheme I'm >> using).  To make it work, I need to be able to prompt the user to type >> in two passwords sequentially. my th

Re: Set AuthName to prompt for sequential passwords

2010-12-20 Thread Matt Puumala
Thank you so much for the insight. Your thoughts are very valuable. I'll be digging into the CookieAuth module to see what I can see. After I look at it just a bit, it may be that I can just use CookieAuth as it is, or with minor tweaks and a big authentication routine. It would deny authentication

Re: Set AuthName to prompt for sequential passwords

2010-12-20 Thread André Warnier
Matt Puumala wrote: Thank you for the reply! I am with you 100%. There are plans for the session db, and the cookie format, all on the drawing boards, to get past "stateless http". But I'm trying to do it stepwise, to save my sanity. Talking about HTTP authentication, that's a good plan. Unfor

Re: Set AuthName to prompt for sequential passwords

2010-12-20 Thread Matt Puumala
Thank you for the reply! I am with you 100%. There are plans for the session db, and the cookie format, all on the drawing boards, to get past "stateless http". But I'm trying to do it stepwise, to save my sanity. So for now the question is: How do I actually prompt the user for the passwords? My

Re: Set AuthName to prompt for sequential passwords

2010-12-20 Thread André Warnier
Hi. Without going into the details of your code, I believe that what you are bumping against may be the very nature of HTTP. In your scheme, you need 2 consecutive interactions with the user, and the second one needs to be able to "remember" what the first one was. The basic logic of HTTP goe