Window Credentials

Printable View

Jan 14th, 2007, 10:39 PM
oceanebelle

Window Credentials

Is it possible to access Window Credentials information from any other scripting language without using asp/.NET?
Jan 15th, 2007, 01:19 AM
penagate

Re: Window Credentials

You mean like integrated Windows authentication?

That's an MSIE+IIS feature, I think.
Jan 15th, 2007, 01:33 AM
RobDog888

Re: Window Credentials

Or do you mean like to log a user on like the API - CreateProcessWithLogon?

I think WMI may also support some user objects/properties.
Jan 15th, 2007, 02:34 AM
oceanebelle

Re: Window Credentials

Quote:

Originally Posted by penagate

You mean like integrated Windows authentication?

That's an MSIE+IIS feature, I think.

Kinda like that.
Jan 15th, 2007, 02:36 AM
RobDog888

Re: Window Credentials

So what are you wanting to do with it?
Jan 15th, 2007, 03:42 AM
oceanebelle

Re: Window Credentials

Quote:

Originally Posted by RobDog888

So what are you wanting to do with it?

well ok

basically, there is this AD that a php applications connects to.

On the browser side, the client uses ActiveX or WScript to verify the currently logged on User and then redirects it to the php site once authenticated.

I am not sure whether this script can get all the information of the User from the AD. If it can't, then it will have to get those information from within php, using ldap functions. Getting the information is painless provided the user credentials are present. However, the activeX emulates auto login, so no more password needed. There is no way of getting the password from php itself. Well, that is as far as I know.

conundrum. :cry:
Jan 15th, 2007, 04:37 AM
RobDog888

Re: Window Credentials

If this was ASP.NET it would be allot easier. Perhaps the ActiveX code is available to you to expand on/modify?

If so, I have a asp.net thread on windows authentication that may give some insights or help.

http://vbforums.com/showthread.php?t=349228
Jan 17th, 2007, 10:42 AM
mendhak

Re: Window Credentials

Quote:

Originally Posted by oceanebelle

well ok

basically, there is this AD that a php applications connects to.

On the browser side, the client uses ActiveX or WScript to verify the currently logged on User and then redirects it to the php site once authenticated.

I am not sure whether this script can get all the information of the User from the AD. If it can't, then it will have to get those information from within php, using ldap functions. Getting the information is painless provided the user credentials are present. However, the activeX emulates auto login, so no more password needed. There is no way of getting the password from php itself. Well, that is as far as I know.

conundrum. :cry:

No matter what you use, you cannot get the password entered unless you replace the ActiveX login control with a custom login control on a web page that 'stores' the password in a session variable, which you then pass to the PHP page that needs to talk to LDAP. Note that in the custom PHP login page you'll need to perform authentication possibly using LDAP functions. Don't know what they are.
Jan 17th, 2007, 10:44 AM
penagate

Re: Window Credentials

php.net/ldap
Jan 25th, 2007, 10:00 AM
oceanebelle

Re: Window Credentials

Yeah i found some good sites as well, like enabling apache to use windows authentication (not just php) using mod_ldap

everything revolves around an existing user and password that is pre-existent on the AD. We have worked out most of the kinks. However, as some kind of company process they are not allowing us at least have that application user and password. I guess there is no other way to it but cross our fingers and escalate.