v8 iwp_auth.html page

[Jerremy]

Hi all,

Just installed FM 8 Server Advanced. On of the new features is the ability to easily edit the home page. We were running 7 and I had edited this page in the app package.

It was an easy setup, and I was able to drop my custom page into the IWP folder.

The problem is - with v8 - FM replaced the browser username / password authentication with a webpage form.

After just getting off the phone with FM, I've been told that this page is not editable.

It is ugly and could possibly be confusing to my users. It has a blue bar at the top that says INSTANT WEB PUBLISHING and it tells you to enter your name and password the the database "xxxxxx" and there is a registered user or guest radio button.

Why let us edit the homepage to only add in this non editable auth page?

I looked all through the files and I cannot find the file: iwp_auth.html. All I want to do is to take out the blue bar, maybe add our logo and remove the 'enter your username and password for the database xxxxx' line.

I just know that this is going to be confusing to my users. They don't need to know what database they are logging in to. I have it all set for them to just log in and get to work. This page also now does not look like a page from my site. It almost looks like an error page as compared to what the user experience was before this change.

Does anyone know how to get to this file? It is not in the same page the iwp_home.html page was.

Thanks for any help.... and FM, again, why let us change the home page and not this new page? It just does not make any sense.

Jerremy

[txjcfsr]

I was just going to migrate from FMSA7 to FMSA8 until I saw this post. It has taken me quite a while to migrate from 6 to 7 and I have things working now. I don't think I want to tackle FMSA8 until I see more issues like this resolved.

Thank you for posting this!

John

[John May - Point In Space]

You could make your own auth page that sends the same variables to the form location.

Or, you can make a direct link to auto-authenticate as well:

www.yourdomain.com/fmi/iwp/cgi?acct=account&name=username&password=password&login=Login&-authdb

- John

[Reed]

The page is editable, but you have to look inside the FM web publishing.app package. Control-click on the .app file and choose show package contents. The file is in there in the same place as the iwp_home.html file. This was how people edited that file before FMI made it more accesible, so you can now do the same with the iwp_auth.html file.

[Jerremy]

Hi again all,

Just a follow-up. I was able to find the iwp_auth.html file in the Web Publishing.app package. My mistake was looking inside the FileMaker Server.app package.

Thanks Reed for pointing that out.

After some experimenting, I was able to edit the page to look like the rest of my site. It was a bit confusing as the header "Instant Web Publishing", the "Login to Database "xxxxx"", etc. were 'hidden' in the java which queried a 'strings' file. So, if you want them to say something else, you can edit the strings file. In this strings file, you'll see an entry for home_ttl_banner which equals "Instant Web Publishing". You'll see this corresponding entry in the iwp_auth.html file. I just removed this line of java code from the iwp_auth.html file. I also removed the code for the "Open Database..." and the user/pass labels, and I just typed in what I wanted.

I also replaced the banner gif with my own gif and changed all the fonts to Arial. ...A lot harder than 'hacking' the old IWP homepage on FM 7, but it the iwp_auth.html page now looks like the rest of my site.

Jerremy

[Phil Hainline]

Hope this thread isn't too old to get some attention.

Jerremy, thanks for posting. That would save a lot of digging (if I needed that depth of integration)

However, I bought FM8 Server Advanced in hopes I wouldn't have to dig that deep. I've build a nice 'Silent Auction' package for my kids school (not that hard) and am using Server Advanced now for the final stages where we need more than 5 web sessions for letting people register, preview Auction Items, and get a nice little PDF of selected items they want to focus on.

All I want to do is login a generic public user (ie. 'OurGuests'). This is not to be confused with FM's generic [Guest] account.

I've read (and replicated) the sad state of affairs with FM8SA, where the only way to get a default login is to only grant [Guest] the IWP permission. This works but then defeats changing the user (through re-login script step) to permit the few folks who are really administering the DB the scope of editing they need.

As a workaround, I'll fall back to giving [Guest] more permissions, and handling security for this app by internal permission table. But this isn't why one historically uses FileMaker, so...

John, your suggestion looks like it a good solution, except that I can't quite get it to work. Are the only parameters to replace: 'username', 'password' ? (and obviously the domain)

http://www.yourdomain.com/fmi/iwp/cgi?

acct=account&name=username&password=password

&login=Login&-authdb

Is there any documentation on the cgi? parameters, OR are we just reverse engineering this from the source?

From reading the JavaScript source around the

, it looks like a little more info is required. (Hope I'm wrong)

There's the SID. But maybe not needed due to:

if ( sid.length > 0 )

form.action = "/fmi/iwp/cgi?" + sid + "&-authserver";

else

form.action = "/fmi/iwp/cgi?-authserver";

and then theres the dbpath

if ( ai.dbpath != null )

{

var hidden = document.getElementById( "dbpath" );

hidden.value = ai.dbpath;

}

Hopefully your greater insight here could save me a few hours of digging. S.S.L. (Sorry So Lazy)

I've done WebObjects for years, but really, this FM login idea shouldn't be so hard.

This seem like a big step backward for people who just want to link to catalogs or listings.

Many Thanks,

-Phil

Edited February 7, 2006 by Guest

[Phil Hainline]

Starting to look the easiest route is going

to be creating a URL that spoofs [Guest] access.

The closest I've come is

http://www.domain.org/fmi/iwp/cgi?

-authserver&acct=guest&login=Login&-db=AuctionDB

This returns to the "iwp_home.html", but clicking on the "AuctionDB" link, gets me directly in. No form.

But this is a two step process.

Hacking the "iwp_auth.html" is starting to look more attractive.

Hopefully someone with more CDML, XSLT, cgi? insights will help us find the simple URL answer.

Thanks, -Phil

Edited February 7, 2006 by Guest