php-windows Digest 16 Aug 2006 08:45:10 -0000 Issue 3021
Topics (messages 27103 through 27104):
Re: single sign on
27103 by: Norbert Gruettner
27104 by: Martin Alsinet
Administrivia:
To subscribe to the digest, e-mail:
[EMAIL PROTECTED]
To unsubscribe from the digest, e-mail:
[EMAIL PROTECTED]
To post to the list, e-mail:
[email protected]
----------------------------------------------------------------------
--- Begin Message ---
Hallo Martin,
ich denke ich kann dir ruhig auf deutsch antworten oder ?!?
Du kannst von einem php-Programm, dass ja auf dem Server ausgeführt wird,
nciht unmittelbar infornationen abfragen, die aus der Browser Session des
Client stammen.
active-x wäre eine Variante, um per Skript den Inhalt von %USERNAME% zu
ermitteln und den Wert per Formulare oder sonstwie an das php-Programm zu
übergeben. Die Ausführung von active-X in einer Browser-Session erfordert
aber i.d.R eine Lockerung der Sciherheitsrichtlinien im Browser, die nicht
überall erlaubt ist.
Mit freundlichen Grüßen
Norbert
""Martin Staiger"" <[EMAIL PROTECTED]> schrieb im
Newsbeitrag news:[EMAIL PROTECTED]
> dear group,
>
> how can we find out, if a user has a valid session on his windows client?
We
> would like to use this session to authenticate in our web-application.
> Will we need active-x controls?
> Thanks,
> Marc
--- End Message ---
--- Begin Message ---
On 05/07/06, Martin Staiger <[EMAIL PROTECTED]> wrote:
dear group,
how can we find out, if a user has a valid session on his windows client? We
would like to use this session to authenticate in our web-application.
Will we need active-x controls?
You have to use an apache module: mod_auth_sspi
http://www.gknw.at/development/apache/httpd-2.0/win32/modules/
I made it work, but you have to enable Internet Explorer in the client
PCs to automatically send the user credentials, because that's
disabled by default:
Tools -> Internet Options -> Advanced options -> Security -> Enable
Integrated Windows Authentication
Here's a tutorial:
http://moinmoin.wikiwikiweb.de/RickVanderveer/ApacheOnWin32DomainAuthentication
When all goes well, you get a couple of $_SERVER variables that tell
you the username who is logged in and his/her windows domain
Good luck.
Martin
--- End Message ---
