Re: [GENERAL] Authenticating from a web service call

2012-03-20 Thread Chris Travers
On Fri, Mar 16, 2012 at 11:39 AM, Bryan Montgomery wrote: > Hello, > We are looking at implementing a web service that basically makes calls to > the database. > > I have been thinking about ways to secure the web service based on the > database. > > I initially thought about just connecting to th

Re: [GENERAL] Authenticating from a web service call

2012-03-20 Thread Bryan Montgomery
Actually, through some experimentation, googling and looking at a postgres book, I found out how to encrypt the password, and to compare that to pg_shadow. However, during my research I realized the need for double encrypting as per postgres clients. So,another option is to use encryption on the w

Re: [GENERAL] Authenticating from a web service call

2012-03-20 Thread Bryan Montgomery
Interesting idea. However, I think this is ssl between the client and database. Given the client would be the server hosting the web service I don't think this would work for the web service client. On Fri, Mar 16, 2012 at 2:54 PM, Raymond O'Donnell wrote: > On 16/03/2012 18:39, Bryan Montgomery

Re: [GENERAL] Authenticating from a web service call

2012-03-16 Thread Raymond O'Donnell
On 16/03/2012 18:39, Bryan Montgomery wrote: > Hello, > We are looking at implementing a web service that basically makes calls > to the database. > > I have been thinking about ways to secure the web service based on the > database. > > I initially thought about just connecting to the database a

[GENERAL] Authenticating from a web service call

2012-03-16 Thread Bryan Montgomery
Hello, We are looking at implementing a web service that basically makes calls to the database. I have been thinking about ways to secure the web service based on the database. I initially thought about just connecting to the database as the user with parameters passed through the web service - h