Server Variable: AUTH_USER 1

[TheConeHead]

If this is the wrong forum, I apologize and if anyone could point my in the right direction, I would aapreciate it!

I can not get the server variable AUTH_USER to show a value. Do I need to make a server change? What could be wrong?

 

[mwolf00]

Are you using [blue]response.write request.servervariables("AUTH_USER")[/blue]?

http://www.devguru.com/Technologies/asp/quickref/request_servervariables.html

Programming today is a race between software engineers striving to build better and bigger idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. - Rick Cook

Tsunami Relief Information​

 

[DreXor]

auth_user is like logon_user .. only applies when the user has been ntlm validated ( as far as i know )

here's more info on it :

http://www.asp101.com/articles/pauld/request/default.asp

DreX
aKa - Robert
if all else fails, light it on fire and do the happy dance!

 

[TheConeHead]

I am racking my brain, but I think there is some type of setting like "allow anonymous access" that needs adjusted on the server ??? I was just hoping someone might know... perhaps this is not the right forum... what is ntlm validation?

 

[mwolf00]

allow anonymous access is something that you set in IIS on your web server

Programming today is a race between software engineers striving to build better and bigger idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. - Rick Cook

Tsunami Relief Information​

 

[DreXor]

ntlm is challenge/response security, basically the gray authentication box that pops up when accessing a restricted area, the reason why you dont get a value for logon_user or auth_user is because as anonymous you are keeping your creditials secret from the server, when you log in you are going under the security of the server system, as anonymous logon_user or auth_user would report ( in theory, but ends up "" ) "MachineName_IUSR" so self defeating.

search the forum for logon_user

DreX
aKa - Robert
if all else fails, light it on fire and do the happy dance!

 

[TheConeHead]

I guess the point is , yes, I am using response.write request.servervariables("LOGON_USER") and it is not showing anything - how can I get it to show the login name?

 

[RhythmAddict112]

Do the users accessing your server have to be authenticated to access the server? IE, is your server on a domain? are you allowing anonyomous access in IIS? Is integrated logon "on" in your IIS settings?

 

[TheConeHead]

yes - the server is on a domain

I turn anonymous access on and I can not get the value of logon_user, I turn it off and I can not load the page - I get an access denied error

I am not sure about integrated logon - where can I check that and what should it be set to?

Thanks

 

[TheConeHead]

oh, yes, integrated windows aythentication is checked

 

[RhythmAddict112]

Integrated Windows Authentication" is on the same "auth.. methods" screen is IIS (win2k server) as anonyomous access. I have an app where I deduce some things from auth_user, my app is set up with "integrated windows auth" on and anoyomous access off.

Im not sure about this, but I think anonyomous access is your issue...I'm not 100% on this, but why would the server grab an authenticated user if you're allowing anonyomous access?

 

[RhythmAddict112]

so if you have a page with nothing on it but

Response.Write Request.ServerVariables ("AUTH_USER")

..and anonyomous access off, you cannot get to it?
Are you looking at auth_user or logon_user?

 

[RhythmAddict112]

oh, also for the app. i'm using AUTH_USER in, I have "basic authentication" on in IIS..same screen.

 

[TheConeHead]

Actually I am leaving out an important point - sorry - it does work in a sense where when I try to go to the page I am prompted to re-enter my login info and I will then be taken to the page and the page shows the values, what I am wanting to do is avoid the redundant entering of login info... I want the logon_user values while having it so people do not have to enter their login info again as they are already logged in....

make sense?

 

[RhythmAddict112]

verify that..
anon access if off
basic auth is on (and a defautl domain is selected)
integrated auth is on

I think I had that problem before, my issue was integrated auth was not on.

 

[TheConeHead]

you not getting the grey prompt for your username and password each time you go to a page?

 

[RhythmAddict112]

Nope.

 

[TheConeHead]

AAuuuhhhhH!!!! I do..... hmmmmmmm.......

 

[RhythmAddict112]

Assuming you're using IE6; go to tools > internet options > security > intranet > custom level ...then scroll down to the bottom, screw with your Logon settings...I have mine set to "logon automatically only in Intranet zone" try both "automatically..."'s

 

[TheConeHead]

Check out the big brain on RhythmAddict112! That did it man, I changed it to Automatic logon with username and password... thanks for hanging in there with me!