Read password protected pages with file()

archangel

Hi, all!

My first post on this great site!

I would like to run a PHP-script from my own server. The script should read the content of a password protected page. I've previously used the function 'file()' to do this, for instance:

print_r(file("http://user:pass@server.tld/directory/"));

This works well if 'server.tld' runs Apache and 'directory' is protected by a .htaccess/.htpasswd-solutions. Now to my problem, the page I would like to read is placed on a server running IIS and is being protected by, what I think is, the password protection in Windows-style (settings made in the properties of the directory/page).

I'm not good when it comes to IIS and Windows-based servers, and I have no possibility to alter the settings on the IIS-server.

Could someone help me out with this?

bradgrafelman

archangel wrote:
protected by, what I think is, the password protection in Windows-style

Do you mean integrated Windows authentication, i.e. your username/password are validated against a domain account (e.g. in Active Directory)?

If so, you might look into using [man]cURL[/man]. I'm not 100% sure, but I think using the NTLM authentication will allow you to authenticate and retrieve the page (assuming you know a valid domain username/pass that can access the directory).

archangel

integrated Windows authentication

I think so, yes.

I will look in to cURL and see if that might do the trick, I'll get back to you later.

archangel

Doesn't seem to work with cURL... I'm only getting the default page of IIS saying I'm not allowed to the content (I have username and password which works well in a browser).

Any other suggestions?

bradgrafelman

Can you show us an example of the code you tried (stripping out the user and pass, of course)?

archangel

archangel@metatron ~ $ curl -v --ntlm -u user:pass server.tld/directory

But this is from the commandline, which should work the same as if I code it in cURL in php.

The top of the output:

* About to connect() to server.tld port 80
*   Trying x.x.x.x... connected
* Connected to server.tld (x.x.x.x) port 80
* Server auth using NTLM with user 'user'
GET /directory HTTP/1.1
Authorization: NTLM TlRMTVNTUAABAAAAAgIAAAAAAAAgAAAAAAAAACAAAAA=
User-Agent: curl/7.15.1 (i686-pc-linux-gnu) libcurl/7.15.1 OpenSSL/0.9.7j zlib/1.2.3
Host: server.tld
Accept: */*

< HTTP/1.1 401 Access Denied
< Server: Microsoft-IIS/5.0
< Date: Sun, 20 May 2007 18:34:17 GMT
< WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADgAAAACAgACmKsnxIZCtVYAAAAAAAAAAAAAAAA4AAAABQCTCAAAAA8=
< Content-Length: 4033
< Content-Type: text/html
* Ignoring the response-body
* Connection #0 to host server.tld left intact
* Issue another request to this URL: 'http://server.tld/directory'
* Re-using existing connection! (#0) with host server.tld
* Connected to server.tld (x.x.x.x) port 80
* Server auth using NTLM with user 'user'
GET /directory HTTP/1.1
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEcAAAAYABgAXwAAAAAAAABAAAAABwAHAEAAAAAAAAAARwAAAAAAAAB3AAAAAYIAAHZlbnRlbG9bGYibJviH0D9PKt/60+AfKZp47rjcqlLT+NXZviK6GGrrdLVUBjZ92OrV+3FuGe8=
User-Agent: curl/7.15.1 (i686-pc-linux-gnu) libcurl/7.15.1 OpenSSL/0.9.7j zlib/1.2.3
Host: server.tld
Accept: */*

< HTTP/1.1 401 Access Denied
< Server: Microsoft-IIS/5.0
< Date: Sun, 20 May 2007 18:34:17 GMT
< WWW-Authenticate: Negotiate
* Authentication problem. Ignoring this.
< WWW-Authenticate: NTLM
< Connection: close
< Content-Length: 4033
< Content-Type: text/html