Implementing Windows Password 2

[gawinkworth]

Hello Class,

I'm putting together an application where certain data either need to be encrypted, or restricted to certain user accounts, or both. What I'd like to do is authenticate using his/her Windows password, thereby eliminating the need for an addition password scheme.

I'm not looking for anyone to feed me the answer, but I would appreciate a nudge in the right direction. Learning is half the fun.

1) How can I implement Windows Password authentication in my application?
2) Any suggestions on encryption functionality? (i.e., API calls, etc.)

Any assist would be welcome. Thanks.

Geoff Geoffrey A. Winkworth
Senior Developer
AT&T Government Solutions

 

[DSummZZZ]

Let's do the second one first. Do a keyword search on encryption and you'll find numerous posts.

For the first one, why do you need to re-authenticate. They've already typed in the proper password, or you wouldn't need your app to check against it.

Then again, maybe you have a scenario I don't have a handle on.
Dave S.

 

[rgbean]

Geoff,
While it maybe the "whole" solution, if you go to

http://www.universalthread.com/,

click on the Downloads Icon on left and choose Visual FoxPro. Next put "password" (without the quotes) in Summary, and one of the results is:
Verify NT Password - March 28, 2001
Can verify NT Domain passwords (from NT/W2K/Win9x) & for local system. ?vpass("password","user","domain&quot Returns .t. on success, .f. on failure. Domain & user are optional. Tested with VFP6, sp5 on W2K & NT4 & TerminalServer & Win98 Sample form included.

Sounds promising!

Rick

 

[rkolva]

Geoff,

To get the current user's name you might try Win32API WNetGetUser (

http://www.news2news.com/vfp/?group=89&function=480).

If your network supports it you can also parse the return from sys(0) to get the current user.

I recently had to deal with the issue of encryption and after trying various routes (using NTFS CryptoAPI, implementing a VFP version of BLOWFISH or similar algorithm, and several other 3rd party tools) decided that Hallogram's Cryptor provided decent encryption (not as strong as recognized algorithms but I'm not protecting national secrets) for little development effort. I believe you can download a demo version (

http://www.hallogram.com/cryptor/).

Good luck,

Ralph

 

[gawinkworth]

Thanks guys. I appreciate your quick responses.

I think I've got enough to work with now.

Peace - G Geoffrey A. Winkworth
Senior Developer
AT&T Government Solutions