Re: Possible to get NT domain user without cfntauthenticate?
Thanks, Michael, that put me on the right track. However, I also had to disable the anonymous user access in order for it to work as expected. Thanks again, Pete On Thu, Jan 15, 2009 at 2:12 PM, Dawson, Michael wrote: > I forget the actual option, but it's not Basic Authentication or Digest > Authentication. It's the other one. ;-) > > Turn that on and IE should, by default, send the user's credentials to > the web server. As mentioned in a recent, similar post, it sends the > hash, not the password. > > However, you can assume that, by that point, the user has already been > authenticated by the workstation. > > I don't like this method because I like to sit down at another user's > computer and log in with my credentials. > > I'm not sure of your sysadmin's reasons, but they seem quite > narrow-minded. If they won't let your web app interact with the DCs, I > bet they hate having workstations connect to the DCs, as well. Seems > kinda silly. > > They won't even allow LDAP access? > > mike > > -Original Message- > From: Pete Ruckelshaus [mailto:pruckelsh...@gmail.com] > Sent: Thursday, January 15, 2009 12:17 PM > To: cf-talk > Subject: Possible to get NT domain user without cfntauthenticate? > > I'm building an intranet application. Users will not necessarily be > logged in, but there are things that I need to track; all users are > logged into the NT domain on their computers, is it possible to get the > username that the person is logged into their PC as? Using > cfntauthenticate isn't an option, the sysadmins won't allow this app to > interface with the domain controller in any way. > > Thanks > > Pete > > > > ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318073 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Possible to get NT domain user without cfntauthenticate?
You have to force some sort of login against the domain to guarntee this infomration (I suggest Integrated Windows Authentication (assuming IIS... other webservers probably have IWA as well)) . Given IE and if the domain name either does not contain dots (as in myserver.com) or if it's added to the local intranet zone, the authenitcation credentials will be automatically passed to the webserver. You can then grab the infomration however you need to do it - perhaps from the CGI vars, but maybe there are other ways to do it as as well... I'm not a CF expert, but I know IIS very well. >I'm building an intranet application. Users will not necessarily be >logged in, but there are things that I need to track; all users are >logged into the NT domain on their computers, is it possible to get >the username that the person is logged into their PC as? Using >cfntauthenticate isn't an option, the sysadmins won't allow this app >to interface with the domain controller in any way. > >Thanks > >Pete ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318034 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Possible to get NT domain user without cfntauthenticate?
I forget the actual option, but it's not Basic Authentication or Digest Authentication. It's the other one. ;-) Turn that on and IE should, by default, send the user's credentials to the web server. As mentioned in a recent, similar post, it sends the hash, not the password. However, you can assume that, by that point, the user has already been authenticated by the workstation. I don't like this method because I like to sit down at another user's computer and log in with my credentials. I'm not sure of your sysadmin's reasons, but they seem quite narrow-minded. If they won't let your web app interact with the DCs, I bet they hate having workstations connect to the DCs, as well. Seems kinda silly. They won't even allow LDAP access? mike -Original Message- From: Pete Ruckelshaus [mailto:pruckelsh...@gmail.com] Sent: Thursday, January 15, 2009 12:17 PM To: cf-talk Subject: Possible to get NT domain user without cfntauthenticate? I'm building an intranet application. Users will not necessarily be logged in, but there are things that I need to track; all users are logged into the NT domain on their computers, is it possible to get the username that the person is logged into their PC as? Using cfntauthenticate isn't an option, the sysadmins won't allow this app to interface with the domain controller in any way. Thanks Pete ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318002 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
re: Possible to get NT domain user without cfntauthenticate?
Without an agent on the server, such as SiteMinder which adds headers to the HTTP response, the browser can only get auth information if the user is logging into the website (i.e., basic auth is off). ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318001 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
