Sure, I'm glad to. First, let me preface by saying the complicated nature of out authentication system is not my idea and I wish it would be easier, but it's not my decision.
We have 2 basic types of users. Those affiliated with the university and those that aren't. Those that are have usernames & passwords from the university. Those that don't have them through us directly. So...
When a user logs in with their UN/PW, first I check it against our database for a match. If no success, I try to query the university via an ASP script they have given us. It is basically this:
<%
'---------------------------------------------------------
'-- check to see that the form was completely filled out--
'---------------------------------------------------------
if Request.querystring("username"

="" or Request.querystring("password"

="" then
response.redirect(## PROMPT USER
end if
principal=Request.querystring("username"

password=Request.querystring("password"
'--------------------------------------------------------
'-- Decide whether to let them in --
'--------------------------------------------------------
set oAuth=Server.createobject("#LOGIN OBJECT"

if oAuth.Auth(principal,password)=1 then
session("login"

=true
session("principal"

=principal
response.redirect ("success"

else
session("login"

=false
response.redirect ("fail"

end if
set oAuth=nothing
%>
So, from our perl script I would like to call this asp somehow, find out if session("login"

=true or false and contimue the perl app based on that. I realize I would be getting rid of the response.redirect lines, correct?
Thanks!
Scott