Centralised Passwords in Filemaker 8 - internally

[Skeeve Stevens]

Some javascript/style in this post has been disabled (why?)

Hey all,

        Is there yet (without plug-in) any way to use the FMP auth system to auth off of a central Filemaker file.

        I don't really want to use an external source for auth (AD, etc) due to security issues and would prefer it be done by all Files in the solution referring to a particular FMP file's user/pass database.

        Anyone know if this is possible?

_______________________________________________________
Skeeve Stevens, RHCE     Email: [hidden email]
Website: www.skeeve.org  - Telephone: [phone]
skype://skeeve
Address: P.O Box 1035, Epping, NSW, 1710, Australia

eIntellego - [hidden email] - www.eintellego.net
_______________________________________________________
I'm a groove licked love child king of the verse
Si vis pacem, para bellum

[Corn Walker]

On Nov 22, 2006, at 9:33 PM, Skeeve Stevens wrote:

> Hey all,
>
>         Is there yet (without plug-in) any way to use the FMP auth  
> system to auth off of a central Filemaker file.
>
>         I don't really want to use an external source for auth (AD,  
> etc) due to security issues and would prefer it be done by all  
> Files in the solution referring to a particular FMP file's user/
> pass database.
>
>         Anyone know if this is possible?

I'm not certain why external authentication might have "security  
issues" whereas having a centralized accounts file wouldn't? Can you  
explain what those security issues are?

As for your query, the file is the container for security in FMP. You  
can not define privileges for multiple files in a single file.  You  
will need to define Privilege sets in every file but once those  
privilege sets are defines you can script the creation/deletion of  
accounts.

Corn Walker
Hatfield, MA



--
To unsubscribe: send an email to <[hidden email]>
Archives: http://www.nabble.com/FMPExperts-f735.html
FMPexperts is hosted by Ironclad Networks <http://www.ironclad.net.au/>

[Skeeve Stevens]

Those security issues are Human.  I don't want the others - Network Admins
having the ability to create/gain access to the FileMaker solution due to
the sensitive nature of the content.  My other option is to setup its own
domain/ldap which they don't control, but due to policies that might be an
issue.

...Skeeve

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Corn Walker
Sent: Thursday, 23 November 2006 2:34 PM
To: Filemaker Experts
Subject: Re: Centralised Passwords in Filemaker 8 - internally

On Nov 22, 2006, at 9:33 PM, Skeeve Stevens wrote:

> Hey all,
>
>         Is there yet (without plug-in) any way to use the FMP auth
> system to auth off of a central Filemaker file.
>
>         I don't really want to use an external source for auth (AD,
> etc) due to security issues and would prefer it be done by all Files
> in the solution referring to a particular FMP file's user/ pass
> database.
>
>         Anyone know if this is possible?

I'm not certain why external authentication might have "security issues"
whereas having a centralized accounts file wouldn't? Can you explain what
those security issues are?

As for your query, the file is the container for security in FMP. You can
not define privileges for multiple files in a single file.  You will need to
define Privilege sets in every file but once those privilege sets are
defines you can script the creation/deletion of accounts.

Corn Walker
Hatfield, MA



--
To unsubscribe: send an email to <[hidden email]>
Archives: http://www.nabble.com/FMPExperts-f735.html
FMPexperts is hosted by Ironclad Networks <http://www.ironclad.net.au/>


--
To unsubscribe: send an email to <[hidden email]>
Archives: http://www.nabble.com/FMPExperts-f735.html
FMPexperts is hosted by Ironclad Networks <http://www.ironclad.net.au/>

[Corn Walker]

On Nov 22, 2006, at 10:51 PM, Skeeve Stevens wrote:

> Those security issues are Human.  I don't want the others - Network  
> Admins
> having the ability to create/gain access to the FileMaker solution  
> due to
> the sensitive nature of the content.  My other option is to setup  
> its own
> domain/ldap which they don't control, but due to policies that  
> might be an
> issue.

Those "others" will have the ability to gain access to the solution  
by virtue of the fact that they will have physical access to the files.

You can create an independent AD or OD domain on the server on which  
FMS is installed but if those "others" have access to the machine  
then they can get in there too. I have found that you need to have a  
trust relationship with the network admins, otherwise access to your  
solution is at their whim and fancy. They will probably be in charge  
of the backup system as well, which provides them the ability to gain  
a copy of the solution without your knowledge. One can then take that  
copy home, run a password utility on it, and peruse the data to one's  
heart's content.

If you need to secure sensitive data that no one should see except as  
authorized then you will probably need to encrypt it. I believe Troi  
Automatisering have a plug-in for that.

Corn Walker
Hatfield, MA

"Never speak more clearly than you think."




--
To unsubscribe: send an email to <[hidden email]>
Archives: http://www.nabble.com/FMPExperts-f735.html
FMPexperts is hosted by Ironclad Networks <http://www.ironclad.net.au/>