How do I pass the currently logged in user's credentials to a web service using Integrated Windows Auth from Perl

Question

I am having a frustrating time trying to do something with Perl that would take a couple of lines of code in C#, namely to call a web service on a Windows server that requires Integrated Windows Authentication.

The most likely candidate I've found for success is a module called LWP::Authen::Ntlm, but all the examples I've googled require you to explicitly supply username, password and domain. I don't want to do that - I just want the request to use the credentials of the currently logged in user, a la CredentialCache.DefaultCredentials in .NET.

Have any of you Perl gurus out there ever had to do this?

Thanks.

Answer 1

Have you tried passing the username and password in the url.

http://username:password\@$server:8080

Answer 2

Webservices are designed to be platform and OS-agnostic. So, if you are trying to do NTLM(IWA) from Unix/Perl, I think, it calls for a redesign of your authentication mechanism to the ones suggested by WS-Security specification.

Answer 3

Here's an idea: start an iexplore process to call a script on a server, since Internet Explorer uses the logged on user as a default logon when accessing servers on the same domain.

Maybe you can achieve something using OLE with the Win32 Modules listed here. Maybe the Win32::API module might be of help.

Answer 4

I think heeen is on a good path with Win32::API, and I suspect that you'll need to roll your own user agent to manage the NTLM handshake with the IIS server. That's not all that bad, the interaction is well understood.

This smells a little like something that Samba could help you with, too. Searching around, there's a lot of buzz about using Samba + !IIS to support integrated authentication, you just need the other direction.

Answer 5

I have been struggling with this as well. I have a possible solution using Cntlm http://cntlm.sourceforge.net/ which provides a local proxy that will authenticate using a hash. This way you can prompt the user for a password once and then generate and save the hash. It would be preferable for someone to build a windows app that would do the same thing and use CredentialCache.DefaultCredentials and not require user input.