This is well known if you program with the API and has been like so forever.  

You are initialising session variables only.  Think of it as though you are 
allocating and initialising the ARS API client variables.  

You are not connecting to any server at this point.  Proof is in the concept 
that to connect with a port you must issue another call to set the port AFTER 
the initialisation call.

If you really must know if the user is (to be) properly authenticated, simply 
call ARVerifyUser() after your ARInitialization and optional ARSetServerPort 
calls.

Note that you need one ARInitialization call per session/ server, each with a 
different ARControlStruct.  The control struct will have pointers to the API's 
session variables.

Cheers
Ben Chernys
www.softwaretoolhouse.com


>----- ------- Original Message ------- -----
>From:         Axton <[EMAIL PROTECTED]>
>To:           [email protected]
>Sent: Tue, 11 Jul 2006 10:19:08
>
>In our AREA plugin, we return an auth error for
>null passwords.  We
>did this to prevent people from locking their
>account when attempting
>to access the account listing (ARUser/ARAdmin
>login) when using a
>preference server.
>
>Axton Grams
>
>On 7/11/06, Angus Comber <[EMAIL PROTECTED]>
>wrote:
>> Hello
>>
>> Only just noticed this.
>>
>> If you attempt to login with for example an
>incorrect password
>> ARInitialization returns zero and no StatusList
>items.  But then if you
>> attempt an operation you get a Statuslist saying
>'Invalid password for an
>> existing user'.
>>
>> This seems odd.  Surely would be better to know
>that your login has failed
>> at ARInitialization stage?  How do people cope
>with this behaviour?
>>
>> Angus
>>
>>
>___________________________________________________
>____________________________
>> UNSUBSCRIBE or access ARSlist Archives at
>http://www.wwrug.org
>>
>
>___________________________________________________
>____________________________
>UNSUBSCRIBE or access ARSlist Archives at
>http://www.wwrug.org

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org

Reply via email to