Accessing Client-Side NT Username 1

[beejay58]

I am trying to access the NT USERID of all users accessing my ColdFusion web pages. I do not want to force users to login a second time to the Web Server in order to generate client cookies, but merely wish to 'trap' their NT login userid (not password !) for validaton purposes.

Is this possible and how is it done ?

Beejay

 

[philhege]

OK, first of all, if this is over the Internet, fuggeddaboudit. They have to be authenticated to the same domain that the Web server's in or be trusted across domains.

If you're in a LAN, easy money. Make sure that Windows Authentication is checked on (and Anonymous access Off) for the resources in IIS. Next, make sure the resources themselves are restricted in NT (the "Everyone" user doesn't have access; only the group given access to the resource).

It helps to restart the IIS service after you make these settings, AND to clear the browser cache.

HTH,

Phil Hegedusich
Senior Web Developer
IIMAK

http://www.iimak.com

-----------
Boy howdy, my Liberal Studies degree really prepared me for this....

 

[beejay58]

Phil,

thanks for that...makes good sense..I can then protect certain pages using NT validation.

Which CF variables store the client userid though ?

I am putting together a HR database and want to allow users to modify their own record. I thought I would use the NT login (userid) for authentication puposes - not ideal but better than nothing.

Beejay

 

[philhege]

It's CGI.AUTH_USER for protected resources (NT authentication).

Phil Hegedusich
Senior Web Developer
IIMAK

http://www.iimak.com

-----------
Boy howdy, my Liberal Studies degree really prepared me for this....