Window Credentials

[oceanebelle]

Is it possible to access Window Credentials information from any other scripting language without using asp/.NET?

[penagate]

You mean like integrated Windows authentication?

That's an MSIE+IIS feature, I think.

[RobDog888]

Or do you mean like to log a user on like the API - CreateProcessWithLogon?

I think WMI may also support some user objects/properties.

[oceanebelle]

You mean like integrated Windows authentication?

That's an MSIE+IIS feature, I think.

Kinda like that.

[RobDog888]

So what are you wanting to do with it?

[oceanebelle]

So what are you wanting to do with it?

well ok

basically, there is this AD that a php applications connects to.

On the browser side, the client uses ActiveX or WScript to verify the currently logged on User and then redirects it to the php site once authenticated.

I am not sure whether this script can get all the information of the User from the AD. If it can't, then it will have to get those information from within php, using ldap functions. Getting the information is painless provided the user credentials are present. However, the activeX emulates auto login, so no more password needed. There is no way of getting the password from php itself. Well, that is as far as I know.

conundrum.

[RobDog888]

If this was ASP.NET it would be allot easier. Perhaps the ActiveX code is available to you to expand on/modify?

If so, I have a asp.net thread on windows authentication that may give some insights or help.

http://vbforums.com/showthread.php?t=349228

[mendhak]

well ok

basically, there is this AD that a php applications connects to.

On the browser side, the client uses ActiveX or WScript to verify the currently logged on User and then redirects it to the php site once authenticated.

I am not sure whether this script can get all the information of the User from the AD. If it can't, then it will have to get those information from within php, using ldap functions. Getting the information is painless provided the user credentials are present. However, the activeX emulates auto login, so no more password needed. There is no way of getting the password from php itself. Well, that is as far as I know.

conundrum.

No matter what you use, you cannot get the password entered unless you replace the ActiveX login control with a custom login control on a web page that 'stores' the password in a session variable, which you then pass to the PHP page that needs to talk to LDAP. Note that in the custom PHP login page you'll need to perform authentication possibly using LDAP functions. Don't know what they are.

[penagate]

php.net/ldap

[oceanebelle]

Yeah i found some good sites as well, like enabling apache to use windows authentication (not just php) using mod_ldap

everything revolves around an existing user and password that is pre-existent on the AD. We have worked out most of the kinks. However, as some kind of company process they are not allowing us at least have that application user and password. I guess there is no other way to it but cross our fingers and escalate.