Using automatic authentication via IE doesn't supply a proper password to pass along (the CGI.AUTH_PASSWORD var returns a null). I think you'll be stuck with a form based system to capture the password text.
You could use HTTPS to encrypt the login transaction. And if you use the automatic login you can actually authenticate twice with one login. (one is transparent, the second supplies the password for SQL Server.) You could then do a test query with a try/catch block to ensure that the password was correct. Hope this makes sense. Jeff Garza Lead Developer/Webmaster Spectrum Astro, Inc. 480.892.8200 [EMAIL PROTECTED] http://www.spectrumastro.com -----Original Message----- From: Neil Ballantyne [mailto:[EMAIL PROTECTED]] Sent: Friday, November 30, 2001 8:35 AM To: CF-Talk Subject: RE: NT Login? Has anyone ever tried to use the authentication information to connect to SQL Server? I've only managed to do this previously by using a form-based login, cfauthenticate to verify the details, and then storing username and password in session variables to pass in to my queries (datasource using trusted connections). Problems with this are: a) Users must login twice b) login details are sent plain text c) anyone with access to the CF server could easily capture the login details -- neil -----Original Message----- From: Garza, Jeff [mailto:[EMAIL PROTECTED]] Sent: 30 November 2001 14:47 To: CF-Talk Subject: RE: NT Login? Yes, if you are using Internet Explorer and your site is defined within the security context of Intranet Zone, IE will automatically send the username/password without a prompt. This is, I believe, a default on IE. You might have to tweak your registry settings companywide if this is not enabled. Cheers, Jeff Garza Lead Developer/Webmaster Spectrum Astro, Inc. 480.892.8200 [EMAIL PROTECTED] http://www.spectrumastro.com -----Original Message----- From: Kris Pilles [mailto:[EMAIL PROTECTED]] Sent: Friday, November 30, 2001 7:04 AM To: CF-Talk Subject: RE: NT Login? But can I access this without havinga NT login window pop up? Kris Pilles Website Manager Western Suffolk BOCES 507 Deer Park Rd., Building C Phone: 631-549-4900 x 267 E-mail: [EMAIL PROTECTED] -----Original Message----- From: Raymond Camden [mailto:[EMAIL PROTECTED]] Sent: Friday, November 30, 2001 9:07 AM To: CF-Talk Subject: RE: NT Login? It seems to be CGI.AUTH_USER. ==================================================================== Raymond Camden, Principal Spectra Compliance Engineer for Macromedia Email : [EMAIL PROTECTED] Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda > -----Original Message----- > From: Kris Pilles [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 30, 2001 8:52 AM > To: CF-Talk > Subject: NT Login? > > > Is there a way for Coldfusion to grab the NT login info of > the user who is > logged into the machine on out intranet? Basically I want > the ability to > display the users name on our intranet without having them login. > > Kris Pilles > Website Manager > Western Suffolk BOCES > 507 Deer Park Rd., Building C > Phone: 631-549-4900 x 267 > E-mail: [EMAIL PROTECTED] > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
