Is it possible to access Window Credentials information from any other scripting language without using asp/.NET?
Printable View
Is it possible to access Window Credentials information from any other scripting language without using asp/.NET?
You mean like integrated Windows authentication?
That's an MSIE+IIS feature, I think.
Or do you mean like to log a user on like the API - CreateProcessWithLogon?
I think WMI may also support some user objects/properties.
Kinda like that.Quote:
Originally Posted by penagate
So what are you wanting to do with it?
Quote:
Originally Posted by RobDog888
well ok
basically, there is this AD that a php applications connects to.
On the browser side, the client uses ActiveX or WScript to verify the currently logged on User and then redirects it to the php site once authenticated.
I am not sure whether this script can get all the information of the User from the AD. If it can't, then it will have to get those information from within php, using ldap functions. Getting the information is painless provided the user credentials are present. However, the activeX emulates auto login, so no more password needed. There is no way of getting the password from php itself. Well, that is as far as I know.
conundrum. :cry:
If this was ASP.NET it would be allot easier. Perhaps the ActiveX code is available to you to expand on/modify?
If so, I have a asp.net thread on windows authentication that may give some insights or help.
http://vbforums.com/showthread.php?t=349228
No matter what you use, you cannot get the password entered unless you replace the ActiveX login control with a custom login control on a web page that 'stores' the password in a session variable, which you then pass to the PHP page that needs to talk to LDAP. Note that in the custom PHP login page you'll need to perform authentication possibly using LDAP functions. Don't know what they are.Quote:
Originally Posted by oceanebelle
Yeah i found some good sites as well, like enabling apache to use windows authentication (not just php) using mod_ldap
everything revolves around an existing user and password that is pre-existent on the AD. We have worked out most of the kinks. However, as some kind of company process they are not allowing us at least have that application user and password. I guess there is no other way to it but cross our fingers and escalate.