|
Hi all,
We have a client/server (C/C++/MFC/Win32) application that historically has used an internal table for managing users/passwords/product permissions etc. We've had a request from a customer to manage these types of things via Active Directory and take advantage of Single Sign-on etc.
I know very little about Active Directory since we don't use it here in our office, but I've done a fair amount of reading and managed to set one up in a VM for testing purposes.
Questions:
1) Since much of our product depends on OUR UserID table and we have some customers that want to use AD , I'm thinking we should be importing account information FROM Active Directory periodically. Does this sound right?
2) When a user logs in - I should be authenticating the user through Active Directory and NOT our internal mechanism?
3) Does Active Directory have a means for me to define a list of permission options that the ADMIN can manage? ie: Add Record, Delete Record, Update Record, that I can check against when one of these operations are performed in our product.
4) I have found a lot of AD code in C# but, having a harder time finding stuff in C++. Anyone have any good examples?
Anything you could forward my way would be greatly appreciated.
Cheers.
Mike.
|
|
|
|
|
The Active directory (AD) is an architecture where domains (containers of users groups, resources and access lists) derives each other hierarchically into forests and trust each other between forest. The way they do this depends on how the managers of your client organization organize their information system, and -ideally- the AD architecture either by domain derivation or trusteeship, can span the world.
Think to the AD as a "generalized DNS for users". You cannot download the entire DNS to get an IP address, hence you cannot pretend to download the AD.
You must instead query the AD.
You application should NOT contain any "user login". You simply should get who is the user actually on a machine by simply query proper OS API (GetUsername ... or similar, nor shure about it, but MSDN may help) and to decide if the user can do or not a given operation you must check if such a user is part or not a given user group (The API should be IsInRole ... or something similar).
The name of the groups corresponding to your app privileges, should be loaded by a config file (the domain administrator will typically place it in a read-only place) and should be defined by the domain admin itself.
This is a minimum way to start with. And is valid -as a concept- also for a stabdard LDAP server - non necessarily AD
2 bugs found.
> recompile ...
65534 bugs found.
|
|
|
|
|
Thanks for your reply - much appreciated.
I'm finding lots of code related to group membership (IsInRole etc) for C#, but not a whole lot in Win32, any help?
Also, is there a way I can query for a list of users in the group?
Again, thanks alot for your reply.
M.
|
|
|
|
|
Mike Doner wrote: I'm finding lots of code related to group membership (IsInRole etc) for C#, but not a whole lot in Win32
There is a chapter o the MS-SDK called "Security" that describe all the aspects, including "Authentication" and "Authorization", that also have sections bout C++. It's all about COM objects. That's why they have mostly C# wrapper: COM is natively marshaled into .net
give a look to http://msdn.microsoft.com/en-us/library/aa375769%28v=VS.85%29.aspx[^]
2 bugs found.
> recompile ...
65534 bugs found.
|
|
|
|
|
Is INT_PTR available in VC++ 2010? Is it safe to use instead of int in places like getting return value from CDialog::DoModal() etc?
--
"Programming is an art that fights back!"
|
|
|
|
|
Yes, the INT_PTR is available in VC++ 2010, and not only it's safe to use it as return value from calls like CDialog::DoModal() but it is strongly recommended! That type is defined as typedef int __w64 INT_PTR; this means that it is just an int: the __w64 keyword is an hint that the compiler uses to find 64-bit portability issues and warn about it.
|
|
|
|
|
Yes it is! answer to second question is also Yeap
"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow
Never mind - my own stupidity is the source of every "problem" - Mixture
cheers,
Alok Gupta
VC Forum Q&A :- I/ IV
Support CRY- Child Relief and You
|
|
|
|
|
I have a dialog.
I am displaying a messagebox with MB_APPMODAL. It comes over the dialog box (fine till now)
I am having one thread in background which updates dialog and make it top most but if message box is visible then I want messagebox to remain at top. So how to focus on that message box again. 
I am using AfxMessageBox to diaplay message.
Well a rough example will like. There are 2 buttons on dialog, 2 messageboxes are already shown. If I click on first button then it will put messagebox1 in foreground , if I click on button 2 then it will put messagebox2 in foreground. I don't want to re-create message box.
I am using AfxMessageBox to diaplay message.
|
|
|
|
|
Your thread could post a user-message at the dialog
and not place the dialog at the top directly... 
The dialog message handler function could
1) place the dialog at the top
2) enumerate its children and place all them at the top,
whose class name = _T("#32770"),
in the enumerating callback function
virtual void BeHappy() = 0;
|
|
|
|
|
Right I was also thinking the same. But my application shows 3 or 4 dialogs so thread might be updating dialog 1 or dialog 2 so I have to put code to handle that message in every dialog which may be at top. Instead of this I wish I could have a handle of that messagebox. If window can have a handle then messagebox should also provide a way to get the handle. Anyways, I am implementing "user-message" solution.
|
|
|
|
|
some tricky ways :- store the caption of your AfxMessageBox() before calling the function. From your other threads, whenever you need to bring message box foreground, call FindWindow('caption'), have message box's handle.. do whatever you want with it.
Try GetLastActivePopup() also, though i haven't used it.
|
|
|
|
|
Couldn't you just use MB_SYSMODAL instead of MB_APPMODAL? Otherwise add MB_TOPMOST?
Good luck!
PURPOSE: Delays program execution until designated condition is indicated.
|
|
|
|
|
Hi,
I want to capture a exception. I used try catch but its not working.Im using the following code. Please suggest me.
LPSTR szError;
try
{
int i = 10;
int j = 0;
int k = i/j;
}
catch(CException *e)
{
e->GetErrorMessage(szError,200,NULL);
}
Thanks,
|
|
|
|
|
The CException *e has somebody to throw. And this wont do the "/" operator.
Use catch(...) what returns GetLastError()
Press F1 for help or google it.
Greetings from Germany
|
|
|
|
|
its not going to the catch block,after executing the i/j statment,the application is getting crashed.
|
|
|
|
|
I do not think that divide by zero is a catchable exception; try throwing something within your code. Also take a look at this page[^].
It's time for a new signature.
|
|
|
|
|
|
Make at least sure you don't have any optimizing turned on. It might remove your entire code block. Step through the code in the disassembly window, instruction by instruction, and inspect what happens and make sure all the code you expect is there.
|
|
|
|
|
That'll work if you're using managed code as that exception comes from the .NET runtime. However as you originally said you want to catch a CException then you're using MFC which (AFAIK, I may be misinformed) doesn't play nicely with .NET and managed code.
Cheers,
Ash
|
|
|
|
|
Karthika85 wrote: we can catch divide by zero error. please chk this link
I did; did you check the note that states: Note You must add the common language runtime support compiler option (/clr:oldSyntax) in Visual C++ 2005 to successfully compile the previous code sample.
This example is for C++.NET and will only work in managed code, you are trying to use CException[^] which is only for MFC exceptions.
It's time for a new signature.
|
|
|
|
|
you also could write such methords or classes which handles such cases and than throws exception.
Press F1 for help or google it.
Greetings from Germany
|
|
|
|
|
There isn't a C++ exception for what you want to catch. You have to use an operating specific method to trap that sort of error. You can convert the operating system error into a C++ exception if the mechanism allows it but it won't happen by default.
As an example you can use structured exception handling (SEH) (the OS specific thing that happens on a divide by zero) on windows to throw a C++ exception.
Cheers,
Ash
|
|
|
|
|
As Ash said, the division by zero is not a C++ exception, so you should use platform specific API to deal with it and translate it to a C++ exception.
Read this from the MSDN: _set_se_translator (CRT)[^] (it requires to compile with the right flags to make it work properly).
Another way to achieve your goal is to use the __try/__except statements (see try-except Statement (C++)[^]).
|
|
|
|
|
No exceptions will be thrown in your code.I would recommend your are targeting VC10 and you don't need the best performance possible consider using SafeInt class.It automatically checks for overflows and attempts to divide by zero.
#include <safeint.h>
...
using namespace msl::utilities;
try{
SafeInt<int> i = 10;
SafeInt<int> j = 0;
SafeInt<int> k = i/j;
}
catch(SafeIntException& e)
{
switch(e.m_code)
{
case SafeIntDivideByZero:
AfxMessageBox(L"Devide by zero occured!");
break;
case SafeIntArithmeticOverflow:
AfxMessageBox(L"Overflow error occured!");
break;
case SafeIntNoError:
AfxMessageBox(L"Other error occured!");
break;
}
}
Life is a stage and we are all actors!
|
|
|
|
|
Hi all,
i am reading a file with help of CStdioFile using while loop and read the file till file reached end of file,in the file somewhere symbol exist,when reading this line with ReadString ,while loop becomes infinite loop and not return and application goes in notresponding state.
please tell me how can i read the full file with this symbol or how can i remove this symbol from file before reading the file.
thanks in advance.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
