authentication filter in Share

[alf_kin]

Hi all,

I'm developing a authentication filter to chain with the existing filters in order to deny access for specific IP Address. When the user attempts to authenticate I want to retrieve the data entered in the login form and, basing on an external properties file, check the IP allowed for that user. I do not know where (session, httprequest…) and how to retrieve the username and password user entered!

any hint????

regards all.

[michaelböckling]

Do you want to whitelist only certain IPs, or do you have to check for username/IP combination? Because doing it in the firewall would be a lot easier in that case.

If you really want to hack the authentication subsystem, things can get complicated. Are you using the alfrescoNtlm authenticator? Implementing a new subsys from scratch is not easy, if you plan to cover HTTP, CIFS, WebDAV, Sharepoint etc.
Your fastest option in that case is probably to modify one of the existing authenticators or wrap them (delegate pattern).

Cheers,
Michael