Comments on: Generate a WorldClient SessionID

By: marcin

marcin — Thu, 21 Apr 2011 13:25:17 +0000

I would like to ask is there a best way to “store” user passwords: flat file, LDAP database or maybe AD? witch of these you use.

maybe some example of working solution… I would like to run “SS-O” with WorldClient on Windows clients.

By: Brian Lang

Brian Lang — Thu, 05 Nov 2009 22:37:53 +0000

I’m wondering if there’s a way to retrieve the unread message count via this, or any other method. Is there a documented API for WorldClient?

By: Brandon

Brandon — Fri, 25 Sep 2009 21:17:26 +0000

I have noticed that once this is done and you obtain a session. The session will time out and end the session. Is there a way to keep the session alive in the background if the user does not visit the worldclient page with that sessionid. Must we imitate the occasional visit or is there a simple post to do this?

By: Brandon

Brandon — Tue, 21 Jul 2009 18:44:35 +0000

nevermind on that last post, it was only a cookie error on my part. thanks

By: Brandon

Brandon — Tue, 21 Jul 2009 18:24:33 +0000

I am able to do all this and login. However when I try to hit the logout page with a GET like I see in their HTML logout button http:/yourserver/WorldClient.dll?Session=XXXXXXX&View=Logout I get the correct page, but the session is staying active, I can refresh an open page such as the inbox for that session and it is still live. I need to be able to ensure a logout. Does anyone have a clue what could be happening?
I am using WebRequest and WebResponse in ASP.net.

thanks in advance

By: Brian Lang

Brian Lang — Fri, 13 Mar 2009 18:44:33 +0000

It looks like MDaemon 10.0.4 Pro is not returning well-formed XML. Here is a sample of what I’m getting returned (edited to protect the innocent):
============================================================
10.0.4 Pro

ABCDEFG
username@mail.example.com
User Name
enabled
disabled
enabled
enabled
disabled

============================================================

I got around the problem by wrapping the returned XML in a root element which I named MDaemon but that’s klutzy. It would be better if MDaemon itself returned well-formed XML.

By: brandon

brandon — Wed, 24 Sep 2008 22:04:25 +0000

I’m looking at using the POST method, or GET as a second resort. Does anyone know if you attempt to login via GET/POST and fail, does that count as a strike against the user in terms of login attempts and lockouts? So after say three logins they would be locked out of worldclient/mdaemon. This might be an issue if there is a possibility of outdated passwords or passwords that are not centralized in a single sign-on. I want to log them in to their mail automatically from a separate program with a browser.

By: Dave Warren

Dave Warren — Wed, 04 Jun 2008 00:48:06 +0000

When you POST the request to Worldclient via HTTP (or HTTPS), the resulting XML is returned in the HTTP request.

It is not saved to disk anywhere, your script will have to capture the results.

By: ernesto

ernesto — Fri, 30 May 2008 13:29:14 +0000

>>The result will return an XML file that will have >>the SessionID. Parse the XML file for the >>SessionID.

how can I read the resulting XML? is it located in some folder on server??

By: Dave Warren

Dave Warren — Fri, 02 May 2008 08:35:06 +0000

True — If you use WorldClient’s web server, the password is not logged.

However, if you use IIS/Apache, or there are proxy servers involved, the password still may get logged.