Geek Answers Handbook

LDAP authentication for current Windows user credentials?

We have an application that is located on our Windows desktop on our intranet using WAMP (W for Windows, P for PHP). We need to implement a new functionality - check the user using his / her windows, registered with credentials, whenever a user visits our intranet site.

Here I miss the basic concepts of its implementation - how can I access the current windows registered in the user's details in PHP.

Is there a way to determine who the current user is and pass this data to users for verification on our LDAP server for verification?

+2
source share
2 answers

I would suggest you use mod_auth_sspi - Apache 2.x authentication module. Its very easy to set up.

Here is the homepage http://sourceforge.net/projects/mod-auth-sspi/

You can protect places, folders, or specific files. You can enable / disable certain users, groups, domains, etc.

I implemented this on a Windows 2008 server with Apache 2.2 and PHP 5.2, and it worked flawlessly for my SSO.

+1
source

Take a look here: http://siphon9.net/loune/2007/10/simple-lightweight-ntlm-in-php/

It is 1 half of authentication.

Just note that apache must have a KeepAlive On set.

It will provide you with current information about the user / domain / workstation.

If you need full support for the NTLM authentication scheme, your web server needs a module for this.

Have a look here: http://modntlm.sourceforge.net/

and here: http://bloke.org/linux/ntlm-authentication-active-directory-on-apache-linux/

In Inboth cases, the URL should be in the "Trusted Zone" for IE and a similar setting for firefox.

+1
source

More articles:


All Articles