Authentication with IIS

[Anon]

Hi,
I am using PHP4 as an isapi mod from within IIS4. I want to perform some custom authentication as described here
http://hotwired.lycos.com/webmonkey/00/05/index2a_page2.html?tw=programming
however I am not getting the kinda of results I wanted.

The first example (which should pass given anything), gets thrown away, I think by IIS.

Does anybody have any suggestions?, is IIS intercepting the authenticates?

Shaun

[ame12]

Shaun, I don't think the PHP_AUTH variables get supported in an IIS environment. That may be why they're not working.

With IIS, it's probably going to be really clunky. Try using REMOTE_USER (to get the user-name) and REMOTE_PASSWORD, but if I remember right the latter isn't supported.

To really auth the credentials, you'll need to retrieve all headers with an ALL_RAW and decrypt the ...base64... in the "Authorization: basic ...base64..." header.

[Anon]

if you set NT Challange response authority for the site (in IIS) the PHP variables and functions work.

[Anon]

How do initiate the challege using PHP? Do you have any ample code?