[RESOLVED] Windows login details

vertmonkee

We have a Windows network with Active Directory.

Each user logs onto the network and then once authneticated they need to login again to our web based intranet.

The intranet runs off PHP on an IIS server.

What I would like to do is when the user opens the intranet pages PHP get's their network login details and checks that they are on our network.

I've been looking at ldap but can't find any good tutorials on using it with Active Directory.

Is what I am looking to do possible?

If so can anyone point me to some good resources for learning how to do it.

Thanks for any help.

bradgrafelman

You can actually have IIS handle the authentication for you. In the properties of the folder you want to protect, go to the Directory Security tab and enable Integrated Windows Authentication (you might have to disable Anonymous access as well).

Play around with the options you see there and let me know if that works - it's been a while since I've worked with IIS, so I might have to go back and examine how I've done it before if you can't get it.

vertmonkee

Thanks for the reply.

Will this allow me to track who is currently accessing the intranet?

I need to know who is on the system as they will be completing assesments online.

Thanks again

bradgrafelman

vertmonkee wrote:
Will this allow me to track who is currently accessing the intranet?

You mean like a "Users Online Right Now" type of thing? No, nothing like that is tracked - you'd have to implement that yourself.

vertmonkee

More like if I access the intranet it will check who I am through my windows authentication.


// Psuedo code

// Check user
$user = windows_auth_user;

// Set a session variable
$_SESSION['user'] = $user;

Then if I complete my health & safety assesment online an sql would run like this


$sql = "INSERT INTO `assesments` (`userName`, `assesment`) VALUES ('$user', 'Health and Safety');

So if I log onto our network with the username ian the $user variable in the first script would be able to pull out the ian username from the windows authentication.

Does that make sense?

bradgrafelman

Yes, that's the point of using Integrated Windows Authentication. I can't remember the exact variable name, but it's something like $_SERVER['AUTH_USER'] that get's set to "DOMAIN\username" when IWA is enabled.

vertmonkee

Thanks very much for the advice.

I've enabled windows authentication and can now get the domain and username.

Thanks again

bradgrafelman

Don't forget to mark this thread resolved (if it is) using the link on the Thread Tools menu.