Grab username from IE, to authenticate against LDAP

Question

The users will only use IE, and within IE it can pass their credentials without being prompted to, if they are logged onto the domain controller.

What I want to know is, how do I go about grabbing their username?

I thought this would do the trick: $_SERVER['auth_user'];but no luck.

Just like this http://stackoverflow.com/questions/168610/can-you-get-a-windows-ad-username-in-php

But I don't know what the code should look like this to capture/grab the user's username

Any help is appreciated.

Answer 1

If your PHP is running on IIS, then you can lock it down at that level. I'm not sure you can get access to the username, but at least it'd only be available to authenticated users with proper permissions to access the site. Hope this was a little helpful.

Answer 2

You have to enable Integrated Authentication on the application folder in IIS, then your method will work.

You can do it in Apache with mod_auth http://rc.quest.com/topics/mod%5Fauth%5Fvas/

Answer 3

There is no way to solve the problem in php directly, but you can obtain the username with the help of javascript:

<script type="text/javascript">
<!--
var WinNetwork = new ActiveXObject("WScript.Network");
alert(WinNetwork.UserName);
//-->
</script>

Just add some AJAX ;)

HTH