REMOTE_USER Variable and its implementation

[Aelara]

Hello, I downloaded a free open source browser based utility (mrbs) for booking rooms and equipment. We run an IIS6 web server and the site has been configured and running without any issues. The problem lies with authentication. I need to use the REMOTE_USER variable as a means of grabbing the username of a person using mrbs at the time of booking a resource using an XP workstation. I don't have the slightest idea how to go about that on the server side. Any Ideas? Were, How and Which method can I use to implement this?

Many Thanks,
Aelara.

 

[WhoKilledKenny]

From their web-site:
MRBS can connect to several kinds of services, like LDAP servers; NT domain
controllers; Netware servers; pop3 or imap mail servers; etc.

Authentication doc, I don't want to assume that you have read this?

http://mrbs.sourceforge.net/AUTHENTICATION.html

More info on your environment. Is this a stand alone web-server or is it part of an AD Domain?



Jesse Hamrick

http://www.powershellpro.com

 

[Aelara]

Hello, Yes I have indeed looked at the document at the tme of deployment. The only descent method of Authentication open to me at present is REMOTE_USER. LDAP is easy but unfortunately not an option in my current setup.

REMOTE_USER is all I'm interested in. All I want is to be given some guidance as to how IIS uses this variable, to what extent it can be used and were it can be set.

Many Thanks, Aelara

 

[WhoKilledKenny]

Start here:

http://www.derkeiler.com/Newsgroups/microsoft.public.inetserver.iis.security/2003-07/1173.html

Sorry I could not have been more help to you, I have not used PHP and IIS.

Jesse Hamrick

http://www.powershellpro.com

 

[Sheco]

You can only actually get what the browser provides in the HTTP Request. This depends to a certain extent on which browser, which version of the browser, the security settings in the browser, and so forth.

That said, if you are using IE in a company intranet with active directory then unless you've jacked the security way up you can pretty much count on IE auto-retrying when your IIS box replys with a HTTP Response of 401 - Unauthorized.

The retry will have a new HTTP Request and this time the Request will contain AD credentials. It will be completetly transparent to the user. Firefox at the default security settings will prompt the user for credentials.