Infralution Support Forum Index Infralution Support
Support groups for Infralution products
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Check Key and not only serial number on authentication

 
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support
View previous topic :: View next topic  
Author Message
jzietz



Joined: 04 Jun 2014
Posts: 3

PostPosted: Wed Jun 04, 2014 2:11 pm    Post subject: Check Key and not only serial number on authentication Reply with quote

Hello,

For a better ability to test staging versions and public versions of our product, we added support for two authentication servers to the product. But there is a problem:

When we are calling
LicenseProvider.AuthenticateKey(authenticationKey);
it extracts the serial number out of the key and authenticates the license key stored in the authentication database with the same serial number.
Neither ProductInfo or the Key will be checked.

In our case it is a problem because if both databases contain the same serial number, the key will be authenticated although productinfo in the key and in the database are different. And the key is too.

Is there a simple way we can do such a check - best before AuthenticateKey, but any possibility is welcome?

--
Best regards,
Jörn
Back to top
View user's profile Send private message
Infralution



Joined: 28 Feb 2005
Posts: 5027

PostPosted: Wed Jun 04, 2014 11:01 pm    Post subject: Reply with quote

Do you have two separate instances of License Tracker database - one for test and one production?

If so then you can just set the "Last Serial No" property (in the Product > Key Generation tab) to a large number eg 1000000 for one of the databases. This will ensure that the serial numbers don't overlap.
_________________
Infralution Support
Back to top
View user's profile Send private message Visit poster's website
jzietz



Joined: 04 Jun 2014
Posts: 3

PostPosted: Thu Jun 05, 2014 1:22 pm    Post subject: Reply with quote

Hello,

we do not use LicenseTracker. We added custom key generators to our cms. We run 2 separate instances of the AuthenticationService on different machines - one in house (staging) and one at a hoster (public).

We bought the source of Infralution AuthenticationService and ported the it to MySQL. So we needed a system to test different use cases on a closed system before releasing an update to the productive system.

Different serial number spaces will work but are not an appropriate solution for us.

We have just added a check for the serial number and key combination to authentication code on our AuthenticationService and start testing right now.

Thank you for your answer. So we are sure we did not miss a build in function in ILS Smile

btw: Are you planing an update of ILS to allow us to change ProductInfo (respectivly license holder) in AuthenticationDatabase (and kind of override ProductInfo which is encoded in the license key). So we could edit ProductInfo in database, if the customer changes (company renamed, license transfered to another department...) and have an easy way to get this info back to customers pc to show in application?

Best regards,
Jörn
Back to top
View user's profile Send private message
Infralution



Joined: 28 Feb 2005
Posts: 5027

PostPosted: Thu Jun 05, 2014 11:07 pm    Post subject: Reply with quote

The ProductInfo can't be changed without changing the key - this is because it is encoded into the key itself. If you are using Authenticated licenses then it is usually a much better option to use Authentication Data. This can be changed after a key has been generated and you can have as much Authentication Data as you want without increasing the length of the key.
_________________
Infralution Support
Back to top
View user's profile Send private message Visit poster's website
jzietz



Joined: 04 Jun 2014
Posts: 3

PostPosted: Tue Jun 10, 2014 3:59 pm    Post subject: Reply with quote

Hello,

thank you for your answer. I am aware that ProductInfo is encoded into the license key for EncodedLicenses and AuthenticatedLicenses. But the field in the database is redundant and even not used by licensing components (except for searching for customers/license key in license tracker I guess).

We already thought about adding it to AuthenticationData and this propably will be easier, but personally I would prefer to see a feature to allow edits for the ProductInfo field in the database. If you have not already scheduled this feature for an upcoming release, we will check how to solve this problem. Thank you for your info.

Best regards,
Jörn
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group