User Authentication Plugins

[thethinkingman]

My Company is interested in purchasing vBulletin, but needs to know what user authentication plugin offereings are available before we can feel comfortable doing so.

Does anyone have any information on this?

THANKS in advance!

[nexialys]

aMember have an authentication/subscription system that is available as a plugin for vB, but is not discussed here.

then, there is some bridges that can plug between your actual system and vB...

but then again, we need to know your actual software to see if a bridge is possible.

[thethinkingman]

Nexialys -

First off, thanks for the help, it's greatly appreciated.

Secondly, to answer your question -

We have an existing user database accessible via HTTP with Plain Text User names and md5 hashed passwords.

We would like a to have a hook where we can call a PHP function when the User Authentication request is made to hit our existing user authetication webservice instead of the vBulletin built-in.

[nexialys]

your hashed passwords may be a little of a problem that can be solved by modifying the way vBulletin is actually hashing its passwords too, so the collision between the two would be nulled...

sure this is possible then, but it is not released as a solution. some existing softwares linked to vBulletin are already doing the same thing...

[thethinkingman]

Glad to know it is possible!

That being said - who would we talk to about purchasing/procuring/bartering for some of the solutions already available if they haven't been officially released?

Or am I misunderstanding what you are saying, and we can't do that/have to go about it another way?

Thanks again!

[bobster65]

Glad to know it is possible!

That being said - who would we talk to about purchasing/procuring/bartering for some of the solutions already available if they haven't been officially released?

Or am I misunderstanding what you are saying, and we can't do that/have to go about it another way?

Thanks again!

There are some free ones available here for LDAP, Drupral, Joomla, and Wordpress .. I found an SSO solution for typo3 and I am currently looking to build a SSO solution between a RoR (Ruby on Rails) CMS and vBulletin (which I will release when finished)

[Reeve of shinra]

If you do not have a php programmer in house, you may want to hire one to create the bridge you need.

While this mod was specially created for SMF for a slightly older version of VB, it essentially shows where vbulletin does the hashing and verification of passwords. It may be of some help in figuring out a solution if you roll your own.

https://vborg.vbsupport.ru/showthread.php?t=97243&highlight=password+hash

[thethinkingman]

Thanks for the help as always everybody.

That being said, I have been informed that the project was not correctly described to me the first time around, so I need to restate the issue.

While we have enough PHP programmers in house to accomplish a bridge (and thank you guys to letting us know that is possible :)), we do not know the vBulletin passwords nor user names that we would need to know in order to develop the seamless link (or SSO) from the already established user names and passwords from our website to vBulletin. That being said, does anyone know of a seamless link/SSO solution to such a problem?

This is a tall task, so I am not sure a solution exists, but i just thought I'd continue to throw that out there and see if anyone had experience in a similar situation.

[King Kovifor]

Thanks for the help as always everybody.

That being said, I have been informed that the project was not correctly described to me the first time around, so I need to restate the issue.

While we have enough PHP programmers in house to accomplish a bridge (and thank you guys to letting us know that is possible :)), we do not know the vBulletin passwords nor user names that we would need to know in order to develop the seamless link (or SSO) from the already established user names and passwords from our website to vBulletin. That being said, does anyone know of a seamless link/SSO solution to such a problem?

This is a tall task, so I am not sure a solution exists, but i just thought I'd continue to throw that out there and see if anyone had experience in a similar situation.

Most of these bridges are better done in-house. Many of the released hacks have problems and bugs and can use with a bit of work. There are some road blocks that needs to be cleared with file paths and stuff when integrating the vBulletin user system.

Once these are blocked you could go several routes with your user bridge:

Start out by importing all users into your vBulletin, the modifying your site's code to revolve around vBulletin's user system.
Building a modification to vBulletin to fetch usernames from your site, this may cause problems in the long run.
Build a script that syncs the databases and when logging in / out, modify the setting of cookies to add two. One for vBulletin's login and an identical one for your site login.


Personally, I recommend using the first option, especially if it is a custom CMS. The only problem with importing your users into vBulletin would be the md5 hashes. You can require that all users reset passwords or if you have too little hashes (because I believe vBulletin uses md5() several times) you could, upon writing the import script bring your passwords with more md5 hashes before sending them into the database.

You can go several routes with this. :)

[thethinkingman]

Most of these bridges are better done in-house. Many of the released hacks have problems and bugs and can use with a bit of work. There are some road blocks that needs to be cleared with file paths and stuff when integrating the vBulletin user system.....

.....You can go several routes with this. :)

Thanks KK :). I may have another q or two if you are around then, but I am waiting on others' response for the moment, so I don;t know when. Hopefully soon!

Thanks either way :)

[King Kovifor]

I hope you know, that we cannot provide you support until your a licensed. Then you must make sure the one asking is on the license. :D