REstricting access to a specific machine

rocketman

Hi all, I have received a price from Aware support to provide a java plugin to allow me to check a client machine MAC address against an entry in the regularuser BO.

I am aiming to be able during the loginnotification proces to be able to say

If this session's MAC address <> LoggedInRegularUser.MACaddress then log this user out.

The price is too much for my humble gliding club. If any other developers are interested in this functionality, please pm me. I'm not looking to make money out of this so the price will be $500 divided by however many people respond

ACDC

This will add another security level to the application which will be a very powerfull feature, so this is very interesting.

However there is one issue that comes to mind,how are you going to establish the mac address at login. This is not availble from the browser like the IP address is ?

rocketman

I'm not a Java programmer but I did some research on the web and found some java code that claims to do it. but a) I couldn't undestand it and b) I wouldn't know where to begin trying to integrate anything into aware.

Guess that's why it's $500

Suspect it might be something in the client scripts that Aware downloads as a compressed file

If I can get 5 of us to agree to share the cost, I'll badger support for some more details but I don't want to pester them until things are a bit more concrete because as it stands, my club can't afford the full cost

ACDC

I understand the MAC address changes every time the data packet moves through a router, so once the data leaves the network if you are able to establish an address of any sort it wont be the originating user machine.

So the stuff you have been researching may relate to your own internal network, but as far as a hosted environment goes, I don't think this would be possible.

rocketman

Seems there's lots of code out there if you are prepared to accept the limitation of IE and activeX controls (which I'm not) So I guess there must be a way.

I'm not talking about reading the packet headers, rather obtaining the machine Mac address and then pushing it to the server as just another piece of data

See http://codingresource.blogspot.com/2010/02/get-client-mac-address-ip-address-using.html for just one example