Groups > Novell > Novell NetWare with PHP > Re: Private website - get eDirectory username




Private website - get eDirectory username

Private website - get eDirectory username
Mon, 13 Nov 2006 21:59:42 GMT
I have an internal private website - Apache and PHP running on
Netware.  I do not want users to have to use a separate login to
access the website.  After they login to the network, I just want to
get their eDirectory username, so I know who they are.  It is not a
critical security issue, I just want the website to be aware of who
they are.  Any suggestions?

Thanks!
Ken Etter

Post Reply
Re: Private website - get eDirectory username
Thu, 16 Nov 2006 02:52:11 GMT
Hi Ken,
KeN Etter <kle@_RemoveThis_msktd.com> wrote in 
news:3hqhl2tvjfuvvfm8cpcqdc69uu6ml8dbco@4ax.com:

> I have an internal private website - Apache and PHP running on
> Netware.  I do not want users to have to use a separate login to
> access the website.  After they login to the network, I just want to
> get their eDirectory username, so I know who they are.  It is not a
> critical security issue, I just want the website to be aware of who
> they are.  Any suggestions?
how do you authenticate your users? if you do with Apache2 mod_auth_ldap then 
you should find the username in the REMOTE_USER var which you can easily 
access from Perl or PHP. There's also a setting AuthLDAPRemoteUserIsDN to get 
the full DN of the remote user.

greetz, Guen.
Post Reply
Re: Private website - get eDirectory username
Thu, 16 Nov 2006 13:46:57 GMT
On Thu, 16 Nov 2006 02:52:11 GMT, Guenter <devforums@novell.com>
wrote:

>how do you authenticate your users? if you do with Apache2 mod_auth_ldap
then 
>you should find the username in the REMOTE_USER var which you can easily 
>access from Perl or PHP. There's also a setting AuthLDAPRemoteUserIsDN to
get 
>the full DN of the remote user.

Guenter,

Right now they just log into the network using the Novell Client.  I
don't have LDAP setup.  REMOTE_USER is not being set.  I want to
somehow get the username without requiring the user to login
separately to the website.  Even something as simple as setting a DOS
Environment Variable at network login and then grabbing that variable
via PHP would probably work.  But I'm not aware of a method for PHP to
get DOS Env Variables.  I don't need detailed instructions, but how
would mod_auth_ldap work and what is the basic concept to set it up? I
want "getting the username" to be totally transparent to the user, I
don't want them prompted for anything.  Thanks!

Regards,
Ken

Post Reply
Re: Private website - get eDirectory username
Thu, 16 Nov 2006 19:36:38 GMT
Hi Ken,

KeN Etter <kle@_RemoveThis_msktd.com> wrote in
news:tjqol2l1eouf6i4d6j7s7sqnr2icirgu17@4ax.com: 

> On Thu, 16 Nov 2006 02:52:11 GMT, Guenter <devforums@novell.com>
> wrote:
> 
>>how do you authenticate your users? if you do with Apache2
mod_auth_ldap
>>then you should find the username in the REMOTE_USER var which you can
>>easily access from Perl or PHP. There's also a setting
>>AuthLDAPRemoteUserIsDN to get the full DN of the remote user.
> 
> Guenter,
> 
> Right now they just log into the network using the Novell Client.  I
> don't have LDAP setup.  REMOTE_USER is not being set.  I want to
> somehow get the username without requiring the user to login
> separately to the website.  Even something as simple as setting a DOS
> Environment Variable at network login and then grabbing that variable
> via PHP would probably work.  But I'm not aware of a method for PHP to
> get DOS Env Variables.  I don't need detailed instructions, but how
> would mod_auth_ldap work and what is the basic concept to set it up? I
> want "getting the username" to be totally transparent to the
user, I
> don't want them prompted for anything.  Thanks!
> 
hmmm, a partly recall tells me that you asked me same already some time ago - 
and I suggested you a script I wrote which scans the server connection table 
and tries to resolve to the username from the incoming ip address....
Did you try this?

Guen.
Post Reply
Re: Private website - get eDirectory username
Thu, 16 Nov 2006 22:42:17 GMT
On Thu, 16 Nov 2006 19:36:38 GMT, Guenter <devforums@novell.com>
wrote:

>hmmm, a partly recall tells me that you asked me same already some time ago
- 
>and I suggested you a script I wrote which scans the server connection table

>and tries to resolve to the username from the incoming ip address....
>Did you try this?

Guenter,

Oh yeah....I forgot about that.  IIRC, that was UCS/UCX.....

I did some digging.  I had tried that and ran into problems.  But you
had told me I needed to get the current version from SourceForge.  At
that point I got pulled onto other projects.  So I will go back and
try that and see what happens.

Regards,
Ken

Post Reply
<< Previous 1 2 3 4 Next >>
( Page 1 of 4 )
about | contact