Last time... Please help!

OK. All I want is to do is check wheather a password is correct or not. I want to ask a server if as string like "asecret" is the correct password for user "myname". All I want to know of the server is if the password is OK or NOT OK. I'm not using it for password guessing or anything. I just want my app to use the same password as the password on the server. So when I change a user's password for his/hers login on the Server my app also "changes" with it and they can use the new password. This way I won't havo to change the password in several places.

What API should I use, and maybe you can also tell me how. I don't care about other stuff around the code, all I want to know is the basic procedure...

I do know how to get a users/group list from the server...

Please, can anyone help me?

[Tryster]

What operating system are you using?

Does it matter? I'm using the app on Win95/98/ME or 2000. I have to validate the password on NT/2000 (NT is enough for now, but would also like to know the 2000 procedure (if not the same as NT4))

Rob.

[Miaourice]

I thinck the system matter! If is win95 you could find the password in registry (search for your password with regedit to see the path). If is WinNT or 2000 you could not even reach the server if you have not access rights allready. From registry you can read with getregsettings or from vb with getsettings.

[Ph34R]

win2k is winNT5...
and the password is encrypted.
and if ya wanna fool around with people like that, just make a trojan or somethin hehe. if you make it, the virus scanners wont even pick it up

Why is this so hard to understand?

I just want my app to check if the user's login to the app is OK or not. The login concists of a username & password. If they are known by the server I just want to ask the server if the combination is OK or not. That way I can change the passwords for my users on the server in the User Manager so their Login will change for Windows, their E-mail boxes, anything else and ALSO MY app. Want an example?

John has a username and password: Username is J123, password is asecret.
Now his login for windows needs the username & password, the mail-server requires the SAME password and my app will need the same password.

Now I (the administrator) go to the usermanager for the server and change his password to topsecret. If I wouldn't have done that his password could also have expired or been changed by himself (I know how to stop him from doing this and I know my share of NT...).
After the password change, he will have to use the NEW password for his next logon, and needs to enter the new password in his e-mail app again. Also my app will now know the new password, and will not accept the old one anymore. All I want to do is have my app ask the server if the password entered is correct yes or no. I don't need to know when the password is wrong what it SHOULD be. I just want to know if it's OK or NOT OK.
Why is it that other apps (like Winroute (see www.winroute.com)) can verify this, but I cannot?

What I'm trying to accomplish is a little module to import user-names and groups (I have accomplished this already) and to use a password verifying routine to check wether a password is correct or not.

I couldn't be more clear about this...please, if you don't get it now don't reply. If you understand the problem and have a suggestion or solution for it let me know...

Thanks.

[Lord Orwell]

Well, i suppose your application could actually try to log into the website/server/whatever with that combination. If it gets a successful connection (various ways to test if you are connected to a server's ip), then it must have been a valid username/password. If the server refused connection, then it obviously wasn't one.
You could probably use the winsock control for this. I don't know for sure.

I know, the question is: HOW do I login/verify the password on the server?

Last time: Operating system: Could be NT4, or Win2000 Server. This app is meant for several company's all running their own OS'es. The client machines will be running anything from Win95 first release to Windows Whistler ....

My app will be a client-server app. The SERVER component (which will be running ON the server) will have to verify the password with the server it's on, then send a OK or NOT OK to the client component.

All the winsock stuff is already working. My server app receives the password: Now I need an API call (or whatever) to verify the password with the server. The returning-an-answer-to-the-client-part is already working. I just need the d*mn API call.