|
| Private website - get eDirectory username |
 |
Mon, 13 Nov 2006 21:59:42 GMT |
I have an internal private website - Apache and PHP running on
Netware. I do not want users to have to use a separate login to
access the website. After they login to the network, I just want to
get their eDirectory username, so I know who they are. It is not a
critical security issue, I just want the website to be aware of who
they are. Any suggestions?
Thanks!
Ken Etter
|
| Post Reply
|
| Re: Private website - get eDirectory username |
 |
Thu, 16 Nov 2006 02:52:11 GMT |
Hi Ken,
KeN Etter <kle@_RemoveThis_msktd.com> wrote in
news:3hqhl2tvjfuvvfm8cpcqdc69uu6ml8dbco@4ax.com:
> I have an internal private website - Apache and PHP running on
> Netware. I do not want users to have to use a separate login to
> access the website. After they login to the network, I just want to
> get their eDirectory username, so I know who they are. It is not a
> critical security issue, I just want the website to be aware of who
> they are. Any suggestions?
how do you authenticate your users? if you do with Apache2 mod_auth_ldap then
you should find the username in the REMOTE_USER var which you can easily
access from Perl or PHP. There's also a setting AuthLDAPRemoteUserIsDN to get
the full DN of the remote user.
greetz, Guen.
|
| Post Reply
|
| Re: Private website - get eDirectory username |
 |
Thu, 16 Nov 2006 13:46:57 GMT |
On Thu, 16 Nov 2006 02:52:11 GMT, Guenter <devforums@novell.com>
wrote:
>how do you authenticate your users? if you do with Apache2 mod_auth_ldap
then
>you should find the username in the REMOTE_USER var which you can easily
>access from Perl or PHP. There's also a setting AuthLDAPRemoteUserIsDN to
get
>the full DN of the remote user.
Guenter,
Right now they just log into the network using the Novell Client. I
don't have LDAP setup. REMOTE_USER is not being set. I want to
somehow get the username without requiring the user to login
separately to the website. Even something as simple as setting a DOS
Environment Variable at network login and then grabbing that variable
via PHP would probably work. But I'm not aware of a method for PHP to
get DOS Env Variables. I don't need detailed instructions, but how
would mod_auth_ldap work and what is the basic concept to set it up? I
want "getting the username" to be totally transparent to the user, I
don't want them prompted for anything. Thanks!
Regards,
Ken
|
| Post Reply
|
| Re: Private website - get eDirectory username |
 |
Thu, 16 Nov 2006 19:36:38 GMT |
Hi Ken,
KeN Etter <kle@_RemoveThis_msktd.com> wrote in
news:tjqol2l1eouf6i4d6j7s7sqnr2icirgu17@4ax.com:
> On Thu, 16 Nov 2006 02:52:11 GMT, Guenter <devforums@novell.com>
> wrote:
>
>>how do you authenticate your users? if you do with Apache2
mod_auth_ldap
>>then you should find the username in the REMOTE_USER var which you can
>>easily access from Perl or PHP. There's also a setting
>>AuthLDAPRemoteUserIsDN to get the full DN of the remote user.
>
> Guenter,
>
> Right now they just log into the network using the Novell Client. I
> don't have LDAP setup. REMOTE_USER is not being set. I want to
> somehow get the username without requiring the user to login
> separately to the website. Even something as simple as setting a DOS
> Environment Variable at network login and then grabbing that variable
> via PHP would probably work. But I'm not aware of a method for PHP to
> get DOS Env Variables. I don't need detailed instructions, but how
> would mod_auth_ldap work and what is the basic concept to set it up? I
> want "getting the username" to be totally transparent to the
user, I
> don't want them prompted for anything. Thanks!
>
hmmm, a partly recall tells me that you asked me same already some time ago -
and I suggested you a script I wrote which scans the server connection table
and tries to resolve to the username from the incoming ip address....
Did you try this?
Guen.
|
| Post Reply
|
| Re: Private website - get eDirectory username |
 |
Thu, 16 Nov 2006 22:42:17 GMT |
On Thu, 16 Nov 2006 19:36:38 GMT, Guenter <devforums@novell.com>
wrote:
>hmmm, a partly recall tells me that you asked me same already some time ago
-
>and I suggested you a script I wrote which scans the server connection table
>and tries to resolve to the username from the incoming ip address....
>Did you try this?
Guenter,
Oh yeah....I forgot about that. IIRC, that was UCS/UCX.....
I did some digging. I had tried that and ran into problems. But you
had told me I needed to get the current version from SourceForge. At
that point I got pulled onto other projects. So I will go back and
try that and see what happens.
Regards,
Ken
|
| Post Reply
|
|
|
|
|
|
|
|
|
|