Re: NT login

2002-01-21 Thread Jochem van Dieten

Kris Pilles wrote:

 I need to know how I can pop up the windows login and use that info to
 verify my usernames and passwords.  Note:  I do not want to use the NT login
 ids, I just want to use the windows login as my login form to my members
 area.  
 
 Anyone know how I can achieve this??


Send an HTTP 401 statuscode to the browser. An unpolished form of a 
customtag can be downloaded from
http://jochem.vandieten.net/coldfusion/customtags/login/

I would strongly recommend reading RFC 2616 and 2617 if you want to try 
this in production because there are some inherent drawbacks of the 
mechanism.

Jochem
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Raymond Camden

Isn't it in one of the CGI vars? Try CFDUMP VAR=#CGI#. I'm pretty
sure it's in there.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Raymond Camden

It seems to be CGI.AUTH_USER.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Kris Pilles

But can I access this without havinga NT login window pop up?

Kris Pilles
Website Manager
Western Suffolk BOCES
507 Deer Park Rd., Building C
Phone: 631-549-4900 x 267
E-mail: [EMAIL PROTECTED]


-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:07 AM
To: CF-Talk
Subject: RE: NT Login?


It seems to be CGI.AUTH_USER.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Raymond Camden

I'm guessing here, but I think so. On my LAN, I turned on security for a
particular folder, and since I was already logged into the domain, it
never prompted me for a login address.

But... I gotta say, I haven't done much w/ IIS Security, so, I'm
probably wrong on this. I'll let someone else with more experience in
this area weigh in on the topic.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 9:04 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 But can I access this without havinga NT login window pop up?
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
 
 -Original Message-
 From: Raymond Camden [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:07 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 It seems to be CGI.AUTH_USER.
 
 ==
 =
 Raymond Camden, Principal Spectra Compliance Engineer for Macromedia
 
 Email: [EMAIL PROTECTED]
 Yahoo IM : morpheus
 
 My ally is the Force, and a powerful ally it is. - Yoda 
 
  -Original Message-
  From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
  Sent: Friday, November 30, 2001 8:52 AM
  To: CF-Talk
  Subject: NT Login?
  
  
  Is there a way for Coldfusion to grab the NT login info of 
  the user who is
  logged into the machine on out intranet?  Basically I want 
  the ability to
  display the users name on our intranet without having them login.
  
  Kris Pilles
  Website Manager
  Western Suffolk BOCES
  507 Deer Park Rd., Building C
  Phone: 631-549-4900 x 267
  E-mail: [EMAIL PROTECTED]
  
 
 
~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Paul Sizemore

You need CFX_DOMAINUSER to get the users Full Name. And, anonymous
Authentication needs to be turned off. Look in the allaire.com Developer's
Exchange. 

-Original Message-
From: Kris Pilles [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:04 AM
To: CF-Talk
Subject: RE: NT Login?

But can I access this without havinga NT login window pop up?

Kris Pilles
Website Manager
Western Suffolk BOCES
507 Deer Park Rd., Building C
Phone: 631-549-4900 x 267
E-mail: [EMAIL PROTECTED]


-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:07 AM
To: CF-Talk
Subject: RE: NT Login?


It seems to be CGI.AUTH_USER.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?


 Is there a way for Coldfusion to grab the NT login info of
 the user who is
 logged into the machine on out intranet?  Basically I want
 the ability to
 display the users name on our intranet without having them login.

 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]



~~
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Mike Townend

AFIAK you need to set IIS to use the Challenge/Response (or whatever its
callled as it changed its name between nt 4 and 2k) and remove the
anonymouse and basic security.

That way IE will attempt to log you into the site before showing a login
box... If this is successful then you will have access to the AUTH_USER
CGI variables without any login woes...

BUT.. This does not work with Netscape etc, but as its an intranet
environment then you could just specify IE

HTH



-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]] 
Sent: 30 November 2001 14:12
To: CF-Talk
Subject: RE: NT Login?


I'm guessing here, but I think so. On my LAN, I turned on security for a
particular folder, and since I was already logged into the domain, it
never prompted me for a login address.

But... I gotta say, I haven't done much w/ IIS Security, so, I'm
probably wrong on this. I'll let someone else with more experience in
this area weigh in on the topic.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:04 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 But can I access this without havinga NT login window pop up?
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
 
 -Original Message-
 From: Raymond Camden [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:07 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 It seems to be CGI.AUTH_USER.
 
 ==
 =
 Raymond Camden, Principal Spectra Compliance Engineer for Macromedia
 
 Email: [EMAIL PROTECTED]
 Yahoo IM : morpheus
 
 My ally is the Force, and a powerful ally it is. - Yoda
 
  -Original Message-
  From: Kris Pilles [mailto:[EMAIL PROTECTED]]
  Sent: Friday, November 30, 2001 8:52 AM
  To: CF-Talk
  Subject: NT Login?
  
  
  Is there a way for Coldfusion to grab the NT login info of
  the user who is
  logged into the machine on out intranet?  Basically I want 
  the ability to
  display the users name on our intranet without having them login.
  
  Kris Pilles
  Website Manager
  Western Suffolk BOCES
  507 Deer Park Rd., Building C
  Phone: 631-549-4900 x 267
  E-mail: [EMAIL PROTECTED]
  
 
 

~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Bosky, Dave

That's what I do on our intranet and it works great.

~Dave

-Original Message-
From: Mike Townend [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 30, 2001 9:23 AM
To: CF-Talk
Subject: RE: NT Login?

AFIAK you need to set IIS to use the Challenge/Response (or whatever its
callled as it changed its name between nt 4 and 2k) and remove the
anonymouse and basic security.

That way IE will attempt to log you into the site before showing a login
box... If this is successful then you will have access to the AUTH_USER
CGI variables without any login woes...

BUT.. This does not work with Netscape etc, but as its an intranet
environment then you could just specify IE

HTH



-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]] 
Sent: 30 November 2001 14:12
To: CF-Talk
Subject: RE: NT Login?


I'm guessing here, but I think so. On my LAN, I turned on security for a
particular folder, and since I was already logged into the domain, it
never prompted me for a login address.

But... I gotta say, I haven't done much w/ IIS Security, so, I'm
probably wrong on this. I'll let someone else with more experience in
this area weigh in on the topic.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:04 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 But can I access this without havinga NT login window pop up?
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
 
 -Original Message-
 From: Raymond Camden [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:07 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 It seems to be CGI.AUTH_USER.
 
 ==
 =
 Raymond Camden, Principal Spectra Compliance Engineer for Macromedia
 
 Email: [EMAIL PROTECTED]
 Yahoo IM : morpheus
 
 My ally is the Force, and a powerful ally it is. - Yoda
 
  -Original Message-
  From: Kris Pilles [mailto:[EMAIL PROTECTED]]
  Sent: Friday, November 30, 2001 8:52 AM
  To: CF-Talk
  Subject: NT Login?
  
  
  Is there a way for Coldfusion to grab the NT login info of
  the user who is
  logged into the machine on out intranet?  Basically I want 
  the ability to
  display the users name on our intranet without having them login.
  
  Kris Pilles
  Website Manager
  Western Suffolk BOCES
  507 Deer Park Rd., Building C
  Phone: 631-549-4900 x 267
  E-mail: [EMAIL PROTECTED]
  
 
 


~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Yager, Brian T Contractor/NCCIM

This only works if the user has (in the options/security tab/custom
level)Automatic login with current username and password checked.  This is the
very last option on that screen.  If it is not checked, the login box will pop
up. But, if you take off basic security, Netscape users will NOT be able to log
on.  Keep basic security on and have the site use SSL.  That is how we had to
make it work in the government!  

Brian Yager
President - North AL Cold Fusion Users Group
Sr. Systems Analyst
NCCIM/CIC
[EMAIL PROTECTED]
(256) 842-8342


-Original Message-
From: Mike Townend [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 8:23 AM
To: CF-Talk
Subject: RE: NT Login?


AFIAK you need to set IIS to use the Challenge/Response (or whatever its
callled as it changed its name between nt 4 and 2k) and remove the
anonymouse and basic security.

That way IE will attempt to log you into the site before showing a login
box... If this is successful then you will have access to the AUTH_USER
CGI variables without any login woes...

BUT.. This does not work with Netscape etc, but as its an intranet
environment then you could just specify IE

HTH



-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]] 
Sent: 30 November 2001 14:12
To: CF-Talk
Subject: RE: NT Login?


I'm guessing here, but I think so. On my LAN, I turned on security for a
particular folder, and since I was already logged into the domain, it
never prompted me for a login address.

But... I gotta say, I haven't done much w/ IIS Security, so, I'm
probably wrong on this. I'll let someone else with more experience in
this area weigh in on the topic.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:04 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 But can I access this without havinga NT login window pop up?
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 
 
 -Original Message-
 From: Raymond Camden [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 30, 2001 9:07 AM
 To: CF-Talk
 Subject: RE: NT Login?
 
 
 It seems to be CGI.AUTH_USER.
 
 ==
 =
 Raymond Camden, Principal Spectra Compliance Engineer for Macromedia
 
 Email: [EMAIL PROTECTED]
 Yahoo IM : morpheus
 
 My ally is the Force, and a powerful ally it is. - Yoda
 
  -Original Message-
  From: Kris Pilles [mailto:[EMAIL PROTECTED]]
  Sent: Friday, November 30, 2001 8:52 AM
  To: CF-Talk
  Subject: NT Login?
  
  
  Is there a way for Coldfusion to grab the NT login info of
  the user who is
  logged into the machine on out intranet?  Basically I want 
  the ability to
  display the users name on our intranet without having them login.
  
  Kris Pilles
  Website Manager
  Western Suffolk BOCES
  507 Deer Park Rd., Building C
  Phone: 631-549-4900 x 267
  E-mail: [EMAIL PROTECTED]
  
 
 


~~
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Neil Ballantyne

Has anyone ever tried to use the authentication information to connect
to SQL Server? I've only managed to do this previously by using a
form-based login, cfauthenticate to verify the details, and then storing
username and password in session variables to pass in to my queries
(datasource using trusted connections). 

Problems with this are:

a) Users must login twice
b) login details are sent plain text
c) anyone with access to the CF server could easily capture the login
details

--
neil


-Original Message-
From: Garza, Jeff [mailto:[EMAIL PROTECTED]]
Sent: 30 November 2001 14:47
To: CF-Talk
Subject: RE: NT Login?


Yes, if you are using Internet Explorer and your site is defined within
the
security context of Intranet Zone, IE will automatically send the
username/password without a prompt.  This is, I believe, a default on
IE.
You might have to tweak your registry settings companywide if this is
not
enabled.  

Cheers,

Jeff Garza
Lead Developer/Webmaster
Spectrum Astro, Inc.
480.892.8200
[EMAIL PROTECTED]
http://www.spectrumastro.com



-Original Message-
From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 30, 2001 7:04 AM
To: CF-Talk
Subject: RE: NT Login?


But can I access this without havinga NT login window pop up?

Kris Pilles
Website Manager
Western Suffolk BOCES
507 Deer Park Rd., Building C
Phone: 631-549-4900 x 267
E-mail: [EMAIL PROTECTED]


-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:07 AM
To: CF-Talk
Subject: RE: NT Login?


It seems to be CGI.AUTH_USER.

Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 



~~
Get the mailserver that powers this list at http://www.coolfusion.com
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Yager, Brian T Contractor/NCCIM

I've done it.  If their SQL SERVER account is the same as their NT account, it
works just fine.  Just do a challenge when they hit the page, and use that
information in your query.  If you are using SSL, no one can see the
information.  

-Original Message-
From: Neil Ballantyne [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:35 AM
To: CF-Talk
Subject: RE: NT Login?


Has anyone ever tried to use the authentication information to connect
to SQL Server? I've only managed to do this previously by using a
form-based login, cfauthenticate to verify the details, and then storing
username and password in session variables to pass in to my queries
(datasource using trusted connections). 

Problems with this are:

a) Users must login twice
b) login details are sent plain text
c) anyone with access to the CF server could easily capture the login
details

--
neil


-Original Message-
From: Garza, Jeff [mailto:[EMAIL PROTECTED]]
Sent: 30 November 2001 14:47
To: CF-Talk
Subject: RE: NT Login?


Yes, if you are using Internet Explorer and your site is defined within
the
security context of Intranet Zone, IE will automatically send the
username/password without a prompt.  This is, I believe, a default on
IE.
You might have to tweak your registry settings companywide if this is
not
enabled.  

Cheers,

Jeff Garza
Lead Developer/Webmaster
Spectrum Astro, Inc.
480.892.8200
[EMAIL PROTECTED]
http://www.spectrumastro.com



-Original Message-
From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 30, 2001 7:04 AM
To: CF-Talk
Subject: RE: NT Login?


But can I access this without havinga NT login window pop up?

Kris Pilles
Website Manager
Western Suffolk BOCES
507 Deer Park Rd., Building C
Phone: 631-549-4900 x 267
E-mail: [EMAIL PROTECTED]


-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:07 AM
To: CF-Talk
Subject: RE: NT Login?


It seems to be CGI.AUTH_USER.

Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: NT Login?

2001-11-30 Thread Garza, Jeff

Using automatic authentication via IE doesn't supply a proper password to
pass along (the CGI.AUTH_PASSWORD var returns a null).  I think you'll be
stuck with a form based system to capture the password text.  

You could use HTTPS to encrypt the login transaction.  And if you use the
automatic login you can actually authenticate twice with one login. (one is
transparent, the second supplies the password for SQL Server.)  You could
then do a test query with a try/catch block to ensure that the password was
correct.  Hope this makes sense.

Jeff Garza
Lead Developer/Webmaster
Spectrum Astro, Inc.
480.892.8200
[EMAIL PROTECTED]
http://www.spectrumastro.com



-Original Message-
From: Neil Ballantyne [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 30, 2001 8:35 AM
To: CF-Talk
Subject: RE: NT Login?


Has anyone ever tried to use the authentication information to connect
to SQL Server? I've only managed to do this previously by using a
form-based login, cfauthenticate to verify the details, and then storing
username and password in session variables to pass in to my queries
(datasource using trusted connections). 

Problems with this are:

a) Users must login twice
b) login details are sent plain text
c) anyone with access to the CF server could easily capture the login
details

--
neil


-Original Message-
From: Garza, Jeff [mailto:[EMAIL PROTECTED]]
Sent: 30 November 2001 14:47
To: CF-Talk
Subject: RE: NT Login?


Yes, if you are using Internet Explorer and your site is defined within
the
security context of Intranet Zone, IE will automatically send the
username/password without a prompt.  This is, I believe, a default on
IE.
You might have to tweak your registry settings companywide if this is
not
enabled.  

Cheers,

Jeff Garza
Lead Developer/Webmaster
Spectrum Astro, Inc.
480.892.8200
[EMAIL PROTECTED]
http://www.spectrumastro.com



-Original Message-
From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 30, 2001 7:04 AM
To: CF-Talk
Subject: RE: NT Login?


But can I access this without havinga NT login window pop up?

Kris Pilles
Website Manager
Western Suffolk BOCES
507 Deer Park Rd., Building C
Phone: 631-549-4900 x 267
E-mail: [EMAIL PROTECTED]


-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:07 AM
To: CF-Talk
Subject: RE: NT Login?


It seems to be CGI.AUTH_USER.

Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

My ally is the Force, and a powerful ally it is. - Yoda 

 -Original Message-
 From: Kris Pilles [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, November 30, 2001 8:52 AM
 To: CF-Talk
 Subject: NT Login?
 
 
 Is there a way for Coldfusion to grab the NT login info of 
 the user who is
 logged into the machine on out intranet?  Basically I want 
 the ability to
 display the users name on our intranet without having them login.
 
 Kris Pilles
 Website Manager
 Western Suffolk BOCES
 507 Deer Park Rd., Building C
 Phone: 631-549-4900 x 267
 E-mail: [EMAIL PROTECTED]
 




~~
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists