according to this topic.
if i have a self registering page written in
js.
Its sending soap request to auth and to create user.
but!
for auth i have to give an admin account name and password who can create users in that domain. After i got an auth token and i can create user with that. But if i have it on
js, anybody could able to look it, and after use it! I mean get the admin account-password easy
is possible ways to hide it?
I have another server with the zimbra servers cert. Running webservice, i can access zimbra server through soap and web as well.
Nobody else can access through soap because he hasnt got cert.
But can access through web, because it is working.
So he could look after the admin password from the
js, and after use it on web login page.
It is possible to restrict only 1 user from loggin on web page?
it is not will be a security hole when i put that name-password on
js?
is any better way to do this?
thx
regards,
sZabi