Re: How to access client's NT system/user environment vars?
That would be a big security hole. The only way I know to get any kind of senstitive information from clients is by using ActiveX controls and even then the client has to download the control and trust it as well. So, basically, I think you're out of luck... Regards, Howie - Original Message - From: "Cruz, Joseph" [EMAIL PROTECTED] To: "CF-Talk" [EMAIL PROTECTED] Sent: Saturday, February 24, 2001 4:01 PM Subject: How to access client's NT system/user environment vars? Hey, all. I was just wondering if there was any way to access and output the client's NT system/user environment variables (i.e. %username% or %windir%) and have them accessible to a CF template. Any ideas would be greatly appreciated! Joe ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: How to access client's NT system/user environment vars?
I don't know about directory but username can be accessed in #REMOTE_USER# The only places I've used it is in intranet apps where I had to make IIS not allow anonymous, so that it would record the nt username. It actually holds the domain/username. Hope that helps J. John Wilker Web Applications Consultant Allaire Certified ColdFusion Developer Office: 909-943-8428 www.billtracker.org http://www.billtracker.org -Original Message- From: Cruz, Joseph [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 24, 2001 1:01 PM To: CF-Talk Subject: How to access client's NT system/user environment vars? Hey, all. I was just wondering if there was any way to access and output the client's NT system/user environment variables (i.e. %username% or %windir%) and have them accessible to a CF template. Any ideas would be greatly appreciated! Joe ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: How to access client's NT system/user environment vars?
Ah. I can see now how it could be a potentially serious security risk if you could somehow get a clients' username just by calling a web page. We were actually looking at a way to automatically allow a user into our web-based applications without having them authenticate again(since we already use their NT Domain credentials to allow them to access the phsyical computer, why have them log in again to a web-app at the same workstation?). Thanks! Joe -Original Message- From: Howie Hamlin [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 24, 2001 4:13 PM To: CF-Talk Subject: Re: How to access client's NT system/user environment vars? That would be a big security hole. The only way I know to get any kind of senstitive information from clients is by using ActiveX controls and even then the client has to download the control and trust it as well. So, basically, I think you're out of luck... Regards, Howie - Original Message - From: "Cruz, Joseph" [EMAIL PROTECTED] To: "CF-Talk" [EMAIL PROTECTED] Sent: Saturday, February 24, 2001 4:01 PM Subject: How to access client's NT system/user environment vars? Hey, all. I was just wondering if there was any way to access and output the client's NT system/user environment variables (i.e. %username% or %windir%) and have them accessible to a CF template. Any ideas would be greatly appreciated! Joe ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: How to access client's NT system/user environment vars?
Will CGI.REMOTE_USER not give you enough to work with? I use that to make it a transparent process for IE users. Netscape users muddy the water a bit but can still be dealt with if required. So what's your setup like? NT/IIS? What browsers? Ken We were actually looking at a way to automatically allow a user into our web-based applications without having them authenticate again(since we already use their NT Domain credentials to allow them to access the phsyical computer, why have them log in again to a web-app at the same workstation?). ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: How to access client's NT system/user environment vars?
CGI.REMOTE_USER doesn't seem to be available unless the user authenticates against the web server (in our case, IIS on Win2K). What we were thinking of doing was bypassing that step entirely since they authenticate to the workstation to begin with (which is where the idea of using the NT Environment Variables (%username%) came from). Thanks for the suggestion, though. :) Joe -Original Message- From: Ken Wilson [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 24, 2001 5:42 PM To: CF-Talk Subject: RE: How to access client's NT system/user environment vars? Will CGI.REMOTE_USER not give you enough to work with? I use that to make it a transparent process for IE users. Netscape users muddy the water a bit but can still be dealt with if required. So what's your setup like? NT/IIS? What browsers? ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: How to access client's NT system/user environment vars?
Sorry, I wasn't paying close enough attention to what you said. The way I handle it is transparent to the user but does require having authentication turned at IIS. Ken CGI.REMOTE_USER doesn't seem to be available unless the user authenticates against the web server (in our case, IIS on Win2K). What we were thinking of doing was bypassing that step entirely since they authenticate to the workstation to begin with (which is where the idea of using the NT Environment Variables (%username%) came from). Thanks for the suggestion, though. :) Joe -Original Message- From: Ken Wilson [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 24, 2001 5:42 PM To: CF-Talk Subject: RE: How to access client's NT system/user environment vars? Will CGI.REMOTE_USER not give you enough to work with? I use that to make it a transparent process for IE users. Netscape users muddy the water a bit but can still be dealt with if required. So what's your setup like? NT/IIS? What browsers? ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: How to access client's NT system/user environment vars?
Maybe this would help? http://www.intrafoundation.com/intranethostingtoolkit.html Regards, Howie - Original Message - From: "Cruz, Joseph" [EMAIL PROTECTED] To: "CF-Talk" [EMAIL PROTECTED] Sent: Saturday, February 24, 2001 4:38 PM Subject: RE: How to access client's NT system/user environment vars? Ah. I can see now how it could be a potentially serious security risk if you could somehow get a clients' username just by calling a web page. We were actually looking at a way to automatically allow a user into our web-based applications without having them authenticate again(since we already use their NT Domain credentials to allow them to access the phsyical computer, why have them log in again to a web-app at the same workstation?). Thanks! Joe -Original Message- From: Howie Hamlin [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 24, 2001 4:13 PM To: CF-Talk Subject: Re: How to access client's NT system/user environment vars? That would be a big security hole. The only way I know to get any kind of senstitive information from clients is by using ActiveX controls and even then the client has to download the control and trust it as well. So, basically, I think you're out of luck... Regards, Howie - Original Message - From: "Cruz, Joseph" [EMAIL PROTECTED] To: "CF-Talk" [EMAIL PROTECTED] Sent: Saturday, February 24, 2001 4:01 PM Subject: How to access client's NT system/user environment vars? Hey, all. I was just wondering if there was any way to access and output the client's NT system/user environment variables (i.e. %username% or %windir%) and have them accessible to a CF template. Any ideas would be greatly appreciated! Joe ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
