nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Login Event

Amit_LnT

Hi,
I am looking for a login event in TS. I have to run a custom script for one more authentication of a user once he/she login to the teamsite. Is there any event which I can catch to run the script?

Env: TS 6.5 SP2 on windows server 2003

Thanks in advance..

-amit

Find more posts tagged with

Comments

Amit_LnT

hi..
anyone on this...

ISCBorisB

hi..
anyone on this...

To the best of my knowledge, there is no such Event. You can customize ...auth/login.jsp Page but this is neither
documented nor supported

Migrateduser

Hi Amit

Not sure but IWAUTH is the session key which provides the login details...It may help you out

Migrateduser

Generally if someone has to control the Login then LDAP or Siteminder are the best options...

Migrateduser

Generally if someone has to control the Login then LDAP or Siteminder are the best options...

I think CSSDK can solve the purpose...please speak with Support if possible...

Amit_LnT

hi all,
thanks for the reply. Modifying system jsp is a step i would like to take it at the end. I will contact support and try to get something there. Will post it if I get something supported from IW.

Thanks,
Amit

Amit_LnT

Hi,
I did not get the satisfactory answer from support. I am trying to find out workaround for it.
Is there any URL command to login to Teamsite. In which I will pass parameters and login to teamsite from some intranet page.

thanks in advance..

John742

you can post back against /iw-cc/login.
Look at these perl modules:
use LWP;
use HTTP::Cookies;

ISCBorisB

you can post back against /iw-cc/login

You probably could... Note though that it's very non-trivial hack.

First of, you can not fake IWAUTH cookie, you'll need encrypted active session ID - and there is no way to obtain that.
So, the only option *seems* to be to instantiate HTTP Agent and start posting. Problem is, you'd have to reverse-engineer
"iw_do_login" Functionality and correctly fake/post up to four different forms. It's certainly possible but better you than me.

It is IMO much easier to hack login.jsp. It is even better to configure some supported SSO like SiteMinder or Kerberos and not do any hacking at all

Amit_LnT

Hi Boris,
I think i m lost..
let me explain you the scene here..
the requirement is that, we have to give a generic account for a group of ppl. That group will access it, with that generic account and perform activity in TS like, create, publish, delete etc. But in this case, we would like to monitor these activities, who has done that. Like if a file is deleted, then name of the user who deleted it. Is there any way to do this..? Or it just all in my head..

Thanks,
amit

nipper

Besides the fact that you are knowing violating the license agreement with IWOV, you're best chance of making this work is to hack the login.jsp like Bo mentioned. You will need ot add another field, to save the name thus providing anyone who does a site audit documentation that you are out of compliance and will need to write a very large check to Interwoven. Sounds like a stellar plan to me.

Amit_LnT

Andy,
I can not modify the TS files, login.jsp. There are several other groups who are sharing the same server. I do not want them to get affected with this change. Is there any other workaround, like when the user has logged in TS and try to do something ?

thanks,
amit

Adam Stoller

Andy,
I can not modify the TS files, login.jsp. There are several other groups who are sharing the same server. I do not want them to get affected with this change. Is there any other workaround, like when the user has logged in TS and try to do something ?

thanks,
amit

Ensure you have, or buy sufficient number of licenses for all the people who need to use the system - add them to a group if desired, and have them login and perform whatever activities you want them to perform as themselves.

Anything else (as has been stated) is a hack and/or a license violation, or both.

ISCBorisB

Andy,
I can not modify the TS files, login.jsp. There are several other groups who are sharing the same server. I do not want them to get affected with this change. Is there any other workaround, like when the user has logged in TS and try to do something ?

thanks,
amit

Besides the fact that you may be violating your Contract (see Andy's post) I'm afraid what you are trying to do is a complete fantasy.

iwserver is just a listener, nothing more. It simply sits there waiting for the requests to come. When request comes Server checks if the
User is authenticated (request provided an active Session ID) and is authorized to do whatever it is trying to do. If everything is Ok server
spawns a thread to execute the request and keeps listening. You (the Developer) have absolutely no way to interfere with this process.

The best you can do is to set your own Event Handler(s) to process some Events afterwards. Even though, Event Object will contain IWOV defined
set of attributes (the set actually depends on Event Type). Long story short, even if you hack login Page to provide some additional information
it is impossible to *inject* this info into system messaging and Events.

Kapish?