Lotus Notes Security AND Flex
Right now I have several applications that starts in Lotus Notes to get the login and password then once you pass that, it lets you into the flex application.
Would love to know how to get the Flex app to be that only part the user gets to and use Lotus Notes security or LDAP security.
Can someone point me in the right direction, PLEASE!!!!
Replies
That's unfortunately not that straight forward. We are working ourselves on it.
There are two security issues to solve:
1)
Once you start a flash application outside the Domino server, you need to authenticate. Currently (Flex 3) has a bug in its webservice classes regarding the remote credentials properties. So LDAP authentication is not possible with a webservice directly.
2)
If you start your flash app from one server and access data from a Domino server that is not of the same domain, you require a crossdoman.xml (please see the postings in this forum regarding this subject). This is actually not related to Domino, but is related Flash security.
We have posted an example on how to use a socket connection to authenticate with Domino. The underlaying code is not from us, but it is open source too. We have simply made it work with Domino.
As said above, we are working on a mechanism that will allow authentication with a Domino server. As soon we have a solution to the problem we will post it.
Good news, last week-end we found a solution to authenticate against Domino LDAP using the Flex URLRequest and URLLoader classes.
We also managed to link the authenticated object session with a webservice object and hence solve the problem with the apparent bug in the Flex Webservice.RemoteCreditentials property.
I will post more details in a few days.