ansaurus

Question

Windows loginID help on Windows/Apache2.2 environment

Answer 1

A:

Not a windows programmer, so I'm not sure what a loginID is, but maybe Win32::LoginName and Win32::LookupAccountName will be of help?

ysth 2009-03-17 03:45:57

Unfortunately, that won't do since Windows will run the .cgi as SYSTEM user and both of the above solutions can only return the parent user's identity. In this case, we need the client browser to supply the Windows/NTLM loginID to Apache somehow, so that the .cgi can utilize this info.

2009-03-17 04:05:57

Ah. Yuck. That seems like the kind of thing the browser shouldn't normally be transmitting to the server??

ysth 2009-03-17 04:42:17

Answer 2

A:

This might not help too much, but I don't believe you need to do anything special to get this information. I'm running an Apache 2.2 installation with mod_auth_sspi and I use the REMOTE_USER environment variable to successfully get the information you're looking for. (For example, when I access one of the pages, REMOTE_USER is "MYDOMAIN\oeuftete".)

I don't use the SSPIOfferBasic option which is the only substantial configuration difference, but I don't think that would matter. I also specify the options in the directive and not in a separate directive.

I guess what I'm saying is, based on what you've given, it should work. So perhaps there's something else going on.

Edit: Here's the basics of my httpd.conf.

LoadModule sspi_auth_module modules/mod_auth_sspi.so

<IfModule mime_module>
    AddHandler cgi-script .pl
</IfModule>

<IfModule alias_module>
    Alias /sotest "C:/Some/path/"
</IfModule>

<Directory "C:/Some/path">
    Options ExecCGI

    Order allow,deny
    Allow from all

    AuthName "Foo"
    AuthType SSPI
    SSPIAuth On
    SSPIAuthoritative On

    require valid-user
</Directory>

And a short test.pl in that directory.

#!perl -T
#

use CGI;

my $q = CGI->new;

print $q->header;
print $q->start_html;
print $ENV{'REMOTE_USER'};
print $q->end_html;

Here's the resulting page from going to sotest/test.pl:

<!DOCTYPE html
    PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"&gt;
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-US">
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
</head>
<body>
MYDOMAIN\oeuftete
</body>
</html>

oeuftete 2009-03-17 17:27:34

oeuftete, if it wouldn't be asking for too much, is there any way you could share your httpd.conf file with me? That would be a huge help. My email address is saker at ghani dot com.

2009-03-17 18:56:30

Thanks oeuftete. The code works, but only if I'm logged into the machine which is running Apache and the .cgi itself. Can you get the above to work when accessing sotest/test.pl from a different machine? In my case, I'm getting a "Authorization Required" on FF and an authentication prompt on IE.

2009-03-18 03:01:39

It works for me on IE fine... if you're getting an authentication prompt in IE, then you probably aren't a valid user. What does your apache error.log say when you get the prompt?For FF, you need to log in with your domain information. So in my example, user "MYDOMAIN\oeuftete" and the password.

oeuftete 2009-03-18 13:24:37

In the comment above, a "valid user" in the IE example means you're logged on as a valid user on the same domain of the machine which is running your Apache installation.

oeuftete 2009-03-18 14:14:00

oeuftete, I had to make one minor tweak on my httpd.conf and your code works beautifully. I owe you one, at least!

2009-03-19 01:29:11

You should let everyone know what the tweak was if you can to help someone else down the road.

oeuftete 2009-03-19 01:34:21

ansaurus

tags:

views:

answers:

Windows loginID help on Windows/Apache2.2 environment

related questions